Zapret[.]exe | Triage™

General

Target
Zapret.exe
Size 3.4MB
Sample260802-kffdlaff92
SHA256 74b3cf6d93a3afdd46589c02250d99d4165b5a025acd60b62e4bc3fc4970a2a1
MD5 8b74529e0f62f2ec1d5d37758fc5d4db
SHA1 714575e8ddca56881959ea77028eb85e2543d736
SHA512 ffffeff5a4c8a56acbda7937e04ff3e4ed7800be276d2fc4b4f767fc95ac87b057944ac91eb87edc237518eafe676dcb60f3e96e3707f932664717929c2e8236
SSDEEP 98304:c+Hs8b+bFxxenJOsoxBux1XJ4xNEn1gGCewB:3KbgJ1Cux1ZUq1gGC
TLSH
T1B4F533849E51149ACAF3EA30D8918D0C6873CB6E9735644253E40C6FF2BF67365EB623
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Zapret.exe

SHA256 74b3cf6d93a3afdd46589c02250d99d4165b5a025acd60b62e4bc3fc4970a2a1
MD5 8b74529e0f62f2ec1d5d37758fc5d4db
SHA1 714575e8ddca56881959ea77028eb85e2543d736
SHA512 ffffeff5a4c8a56acbda7937e04ff3e4ed7800be276d2fc4b4f767fc95ac87b057944ac91eb87edc237518eafe676dcb60f3e96e3707f932664717929c2e8236
SSDEEP 98304:c+Hs8b+bFxxenJOsoxBux1XJ4xNEn1gGCewB:3KbgJ1Cux1ZUq1gGC
TLSH
T1B4F533849E51149ACAF3EA30D8918D0C6873CB6E9735644253E40C6FF2BF67365EB623
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12929120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths