Mario[.]exe | Triage™

General

Target
Mario.exe
Size 863KB
Sample260728-w32e5aba84
SHA256 c5b5341b676cab8f400e3e2a1c08bed9bd46e9ec5fa5de31e2c5e0e80cc929e1
MD5 5072e3a2241b4e1bf41a2730c79475cb
SHA1 41d420c055a80e840044cb825eec2d87c0462d2a
SHA512 95fbdaa1dd9fa46132f8935d886351163057755b691bc7b212d5e1dd5e93d72d078d63768ee1377204c980472418e17bb53478e4a25b23311efeb2d571b2eb3e
SSDEEP 12288:MrE/ELk3YMYd0AhhdR57vm1+MEMSMNPasLhBQNeT3/5BHBoeY6g0ZpHrwG2u0XKL:ZA+9AHdz7vm0C91YoT3/5BHNtpLwJK9l
TLSH
T1AC151202FAC6CE76C08614B925A36BEF5336FDA44D218BA3D720B75E7D632D05236346
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mario.exe

File Explorer

Mario.exe

.exe 863KB

Mario.exe

SHA256 c5b5341b676cab8f400e3e2a1c08bed9bd46e9ec5fa5de31e2c5e0e80cc929e1
MD5 5072e3a2241b4e1bf41a2730c79475cb
SHA1 41d420c055a80e840044cb825eec2d87c0462d2a
SHA512 95fbdaa1dd9fa46132f8935d886351163057755b691bc7b212d5e1dd5e93d72d078d63768ee1377204c980472418e17bb53478e4a25b23311efeb2d571b2eb3e
SSDEEP 12288:MrE/ELk3YMYd0AhhdR57vm1+MEMSMNPasLhBQNeT3/5BHBoeY6g0ZpHrwG2u0XKL:ZA+9AHdz7vm0C91YoT3/5BHNtpLwJK9l
TLSH
T1AC151202FAC6CE76C08614B925A36BEF5336FDA44D218BA3D720B75E7D632D05236346
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

658976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

Mario.exe

generic