41ec02bd69459c66607d67c41ef7ca116915cb2bf78c170bc1e2da9b8f44d46e

General

Target
41ec02bd69459c66607d67c41ef7ca116915cb2bf78c170bc1e2da9b8f44d46e
Size 1.2MB
Sample260804-c482taep6z
SHA256 41ec02bd69459c66607d67c41ef7ca116915cb2bf78c170bc1e2da9b8f44d46e
MD5 907cc375edeaa5f783b244fff2521915
SHA1 102d204ee14105104a42731394b18bddb16ce94d
SHA512 f277001c29dbed5aab7b9449b823b585cadc6cd8dc3b6a86991e228047cc1071e709b15824796a5aa941068ff6b7fb5812d71cddf750d7edb0efd8310123c76c
SSDEEP 24576:dBdCwZl/EtV7IXpPXglXImNtAq9Y0KPQ1TLtg4QKJfUWxrRYhId:dqwA8XpEXUq20JRtVQKWorRn
TLSH
T16545339867950D8E4E2B5D0F7BFC788E3B839AE5804167F94C9930490DB3F122A627F5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Synaptics蠕虫专杀.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Synaptics蠕虫专杀.exe
unpack002/out.upx

File Explorer

41ec02bd69459c66607d67c41ef7ca116915cb2bf78c170bc1e2da9b8f44d46e

.zip 1.2MB
Synaptics蠕虫专杀.exe

.exe 1.2MB
out.upx

.exe 192KB

41ec02bd69459c66607d67c41ef7ca116915cb2bf78c170bc1e2da9b8f44d46e

SHA256 41ec02bd69459c66607d67c41ef7ca116915cb2bf78c170bc1e2da9b8f44d46e
MD5 907cc375edeaa5f783b244fff2521915
SHA1 102d204ee14105104a42731394b18bddb16ce94d
SHA512 f277001c29dbed5aab7b9449b823b585cadc6cd8dc3b6a86991e228047cc1071e709b15824796a5aa941068ff6b7fb5812d71cddf750d7edb0efd8310123c76c
SSDEEP 24576:dBdCwZl/EtV7IXpPXglXImNtAq9Y0KPQ1TLtg4QKJfUWxrRYhId:dqwA8XpEXUq20JRtVQKWorRn
TLSH
T16545339867950D8E4E2B5D0F7BFC788E3B839AE5804167F94C9930490DB3F122A627F5
MD5 SHA1 SHA512 SSDEEP TLSH

Synaptics蠕虫专杀.exe

SHA256 c158460bf09c36219d35adf5d78d1598c9a983ea65df905f785b98ca4c2213ec
MD5 1a8df8850b555776f51966da3c6a110a
SHA1 bc5706268c528f22aa35fe2261fa1cb62347597e
SHA512 1728870fc0bbd7d3f6a1f12e66a7014d643d4211cbf57ec2dfd10979170744a1d053c9c9506dc69c069b5428e50587c58940aa37a74612c38d5cf6c4464f5c5f
SSDEEP 24576:Oc0siBP/aRVTI/ffDglXOmV3csLCYaFeDRbJuqkMJ3UAbr/87Bb:OcPi+M/fIX4sWY75JnkM2cr/k
TLSH
T137453388B384CD4ACE2B583BFFBCA4ED278B9E95C48157B748843D4D2C77A0129567B4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

216304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 a7231e4d8ac1a7596f997e04cc4cf3b46e069511f63e3e2572f5ec131558a245
MD5 3e66d702f3cb45d986b4254943831f3e
SHA1 6ad1c313891bf1e5cd1ebd0489a53e101970c43d
SHA512 9153e191028523b720abe3b59781c67642bb6a65ffa8a32d4e7424e55ada71fb3c374c8d741baceff8dcfde9a398b9d05e45936e403020b7c90e4f39f6cace9d
SSDEEP 3072:5YiTpXEq7ndNiDDdwcwqKSncs4lzBzJ2J/Q3brS:5YsrnLiDDKTs4l9J2Cv
TLSH
T167143B497AD5C079D0D38479B0CD2BC341B98FBC49148EA71180BB6BBEFABC5AE4419D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

76434

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

41ec02bd69459c66607d67c41ef7ca116915cb2bf78c170bc1e2da9b8f44d46e

Synaptics蠕虫专杀.exe

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

41ec02bd69459c66607d67c41ef7ca116915cb2bf78c170bc1e2da9b8f44d46e

Synaptics蠕虫专杀.exe

generic

out.upx

generic