GeoGessHck2[.]1[.]zip

General

Target
GeoGessHck2.1.zip
Size 3.4MB
Sample260802-28vsestclh
SHA256 11529f44f5ea27365c478064552e8dd2ada1599d302041f2937fcb44ec288ce1
MD5 755edbcfc315102caea8f636ae85adc7
SHA1 168ff70c7bb59338bab13313edb491a836729b7e
SHA512 1702907cb7899a7cd7deb20c6c8d74c916a53a14a8c4b27a7aa46e2056a351991e861feb0ea5ff463b0936666e485b048301a2b4b5f3afe92c763f9a7c8d8422
SSDEEP 98304:Nnc6LVKrMfCVWS8OYEXEKoxeZxGGGB1O5n9:NnciTCWxOY3KVGrB1O5n9
TLSH
T132F5333386076302FEDD2C58F7368B19CD5E35BDC7E650DAF89209E18AA7458E6F50A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/GeoGessHck2.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GeoGessHck2.exe

SHA256 11529f44f5ea27365c478064552e8dd2ada1599d302041f2937fcb44ec288ce1
MD5 755edbcfc315102caea8f636ae85adc7
SHA1 168ff70c7bb59338bab13313edb491a836729b7e
SHA512 1702907cb7899a7cd7deb20c6c8d74c916a53a14a8c4b27a7aa46e2056a351991e861feb0ea5ff463b0936666e485b048301a2b4b5f3afe92c763f9a7c8d8422
SSDEEP 98304:Nnc6LVKrMfCVWS8OYEXEKoxeZxGGGB1O5n9:NnciTCWxOY3KVGrB1O5n9
TLSH
T132F5333386076302FEDD2C58F7368B19CD5E35BDC7E650DAF89209E18AA7458E6F50A0
MD5 SHA1 SHA512 SSDEEP TLSH

Password

9760

SHA256 a4fd89f35c494046efc93db5d607346b541fd8095035b52983721b3f906de33b
MD5 26c7a9dfdfd66d07649117177d4317d6
SHA1 d089b6f143a10cd8d7a4b55cf758b9791f5d0ad6
SHA512 aace3ed852cd41a471a1bb7b8cb34989c8ca79d2e14cd91daa61c7674d02ee4003e7ca4a565882b331d95696dfb98f60e80f86b400d39a3de1c1bd44db42080a
SSDEEP 49152:sQsgNpE+dJEMBIh5OmW/SDdIFcscmdgT6Ncp1BgZCs3cBjKK0KLy+s6szAw32VK:egNHHBIody596NIkZCsMBjKIWdhUbK
TLSH
T10CF5336FCFF19B93F55B23B032C8064A56E8471C4D68AE200470456AA4B9FE35FC75BA
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12920320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths