General

  • Target
    e5bc71a95e06f2eb4d00d492b07bd5b8ac3233c9daa18b9f9b38a725df9bad6f
  • Size 816KB
  • Sample260922-pyhc5attct
  • SHA256 e5bc71a95e06f2eb4d00d492b07bd5b8ac3233c9daa18b9f9b38a725df9bad6f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • e5bc71a95e06f2eb4d00d492b07bd5b8ac3233c9daa18b9f9b38a725df9bad6f
    .exe 816KB
  • out.upx
    .exe 2.0MB

e5bc71a95e06f2eb4d00d492b07bd5b8ac3233c9daa18b9f9b38a725df9bad6f

  • SHA256 e5bc71a95e06f2eb4d00d492b07bd5b8ac3233c9daa18b9f9b38a725df9bad6f
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
b9:2c:5c:47:45:1b:cb:41:9d:19:75:8d:6c:f4:b4:4e:cb:62:6a:f1:70:28:92:ac:50:d5:11:b2:bd:35:53:4c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=HaoShuQing,OU=SIGN,L=beijing,ST=beijing,C=CN,1.2.840.113549.1.9.1=#0c103439353338343134394071712e636f6d

PE Signature issue

Digest
05:23:2b:09:e6:a6:13:06:31:74:94:ea:f0:59:f5:68:13:a8:1f:b5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=HaoShuQing,OU=SIGN,L=beijing,ST=beijing,C=CN,1.2.840.113549.1.9.1=#0c103439353338343134394071712e636f6d
Minor OS version
0
Major OS version
4
Entry point
2151472
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED
PDB paths