15_Little_Big_Adve[.]rar

General

Target
15_Little_Big_Adve.rar
Size 77KB
Sample260913-al9jhsaj21
SHA256 d433eddf5dc319cb183c709649a6795e4a5ce46c422888236a7f835db77730c9
MD5 c355f4b132457825005bd720b3d317a6
SHA1 712b4390247323fb219b6077e286db44b278db8b
SHA512 365a5ac90caca81f04f77ff674f4fa985752e17807e33673d3554dd6441665646de14832d55640782be28c55a43f937ec931a66a2c310e4ebfd85fcc3132f4d2
SSDEEP 1536:dADnU2xsFspM5FbxOLcuwIA5OYgGhngv/mHTronEEU8IcIZh6S:qruFYAudwOY/gX8ron5UNc+n
TLSH
T16C7312E1D01FE24EC24417398CB4ED39C771EA8697A4BA47D0B5F7B090D7A770A6A720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/Little Big Adventure Trainer.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Little Big Adventure Trainer.exe

SHA256 d433eddf5dc319cb183c709649a6795e4a5ce46c422888236a7f835db77730c9
MD5 c355f4b132457825005bd720b3d317a6
SHA1 712b4390247323fb219b6077e286db44b278db8b
SHA512 365a5ac90caca81f04f77ff674f4fa985752e17807e33673d3554dd6441665646de14832d55640782be28c55a43f937ec931a66a2c310e4ebfd85fcc3132f4d2
SSDEEP 1536:dADnU2xsFspM5FbxOLcuwIA5OYgGhngv/mHTronEEU8IcIZh6S:qruFYAudwOY/gX8ron5UNc+n
TLSH
T16C7312E1D01FE24EC24417398CB4ED39C771EA8697A4BA47D0B5F7B090D7A770A6A720
MD5 SHA1 SHA512 SSDEEP TLSH

SHA256 84cff5211ee928fb6b7d8fffda5db1db9e9515536c0c6ed6229a9760ed78f762
MD5 3ea71fa255bc3625654f63c8f767b15d
SHA1 8441162d053520126bf1f889aedbd460a1264c3d
SHA512 7dd51d099868638d311636368223fd13aba7ff4863571ef39ff51f0a98793ad5ba85fff8937e3d133f29002fa436ed099b1b40681c1950b469132cc32edc30c3
SSDEEP 1536:o5Ty5Lhs2HPq8I0/sayrSPI09dnYifQXck9S3fowyRsbhk59jsc7ho8:o5aJ3I0/Um6iflk9WfoB0yjz
TLSH
T11B830237D42AA4C9DF35293B6BE11939A538B48EA11B3A4F69163D5F31F23B2828C501
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

341360

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths