SearchApp[.]exe | Triage™

General

Target
SearchApp.exe
Size 3.4MB
Sample260804-xn2b9afe34
SHA256 1124e56be33b18e51d0f5ec29f6f92648bbc936ed9b610c738913af1379dba98
MD5 5317bfca88592896b9cf2cf263fb05bd
SHA1 0d4df9094e8008f08127b92d9c3f1eda2f293de6
SHA512 7ef2b6ef8ba3ef7e8cba895e04a0dde63994e5f9c09d479e14268d3b60037b317d89f4d0f8dd2ef0d39aca7cef798c624151a6fd34cca4b25e5e8446f7d4b9d0
SSDEEP 49152:yl4+bHmuMVApuhjdya6HLpzlRKHIIZ4wc0ehiP1k5KpjlBzwQLuvvCLUBsCqp:SXuBdGr5rWIsJ/1oWjiKyep
TLSH
T16DF5337D0E589A70F47D08FC4A2A32CD733A2AC04A261D16769D0F699B45E3D1C97FE2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SearchApp.exe

SHA256 1124e56be33b18e51d0f5ec29f6f92648bbc936ed9b610c738913af1379dba98
MD5 5317bfca88592896b9cf2cf263fb05bd
SHA1 0d4df9094e8008f08127b92d9c3f1eda2f293de6
SHA512 7ef2b6ef8ba3ef7e8cba895e04a0dde63994e5f9c09d479e14268d3b60037b317d89f4d0f8dd2ef0d39aca7cef798c624151a6fd34cca4b25e5e8446f7d4b9d0
SSDEEP 49152:yl4+bHmuMVApuhjdya6HLpzlRKHIIZ4wc0ehiP1k5KpjlBzwQLuvvCLUBsCqp:SXuBdGr5rWIsJ/1oWjiKyep
TLSH
T16DF5337D0E589A70F47D08FC4A2A32CD733A2AC04A261D16769D0F699B45E3D1C97FE2
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12929008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths