HorrorTrojan[.]exe

General

Target
HorrorTrojan.exe
Size 2.2MB
Sample260831-rbae4stbka
SHA256 fe8d19b219e7ea3cf17d747932ecba2a45ca5fe0573870f7f0fe31c7726b074c
MD5 88501d015f58ab6c33b32f78324de059
SHA1 83bf9bef17b44940710a32939bff0e10e7d83f9a
SHA512 c03583a63f2cfa17649fc7abaf398ea7f121be191d8655bd253b78747be551bed1497f9547d9446747a7906ebd733a24c547e61d1ef56788b105cb593ea823af
SSDEEP 49152:bKyhZJirb8GVjdY1F9xFgGlFmFMUbhNVM5pEEuk32SEnsPf:blBQb8YZ0F/FgGlK5b0uBkPf
TLSH
T13AB533F3EA739601C2385A33AAE61913353787DB8742C4F06D8BB6F57DE5C829354885
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HorrorTrojan.exe

SHA256 fe8d19b219e7ea3cf17d747932ecba2a45ca5fe0573870f7f0fe31c7726b074c
MD5 88501d015f58ab6c33b32f78324de059
SHA1 83bf9bef17b44940710a32939bff0e10e7d83f9a
SHA512 c03583a63f2cfa17649fc7abaf398ea7f121be191d8655bd253b78747be551bed1497f9547d9446747a7906ebd733a24c547e61d1ef56788b105cb593ea823af
SSDEEP 49152:bKyhZJirb8GVjdY1F9xFgGlFmFMUbhNVM5pEEuk32SEnsPf:blBQb8YZ0F/FgGlK5b0uBkPf
TLSH
T13AB533F3EA739601C2385A33AAE61913353787DB8742C4F06D8BB6F57DE5C829354885
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8641488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths