SecurityHealthSystray[.]exe

General

Target
SecurityHealthSystray.exe
Size 89.0MB
Sample261014-e4pz2sv16r
SHA256 10848b44aa931cd22b542687cbadba98d93110228731eed104600fdc81e283d1
MD5 0e5079ed859d98b996142e8640189da8
SHA1 587842f76c919775fb9b094a4c5806fec8be2459
SHA512 867812bca3440d575650160ad5444b8295e1d53227849286b7bc40b71b9500481cff815d4fe4f6cb908db6116abdf82f34ab8bb58a2e9369b0fc42c286999cdf
SSDEEP 1572864:nHhUyRirpEXLL7fEVNkK31RArVgIaTBYkAVliVJQhA8Xk5uMtMMN1zPcJNpAnYCl:nHtirOnUH8hGWliVChA8XkbpcPAYdu
TLSH
T1251833FAC0B72AC566CDCB3C06A07C7149E5BC58DCA9422F3251E96159E3307BB90ADD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecurityHealthSystray.exe

SHA256 10848b44aa931cd22b542687cbadba98d93110228731eed104600fdc81e283d1
MD5 0e5079ed859d98b996142e8640189da8
SHA1 587842f76c919775fb9b094a4c5806fec8be2459
SHA512 867812bca3440d575650160ad5444b8295e1d53227849286b7bc40b71b9500481cff815d4fe4f6cb908db6116abdf82f34ab8bb58a2e9369b0fc42c286999cdf
SSDEEP 1572864:nHhUyRirpEXLL7fEVNkK31RArVgIaTBYkAVliVJQhA8Xk5uMtMMN1zPcJNpAnYCl:nHtirOnUH8hGWliVChA8XkbpcPAYdu
TLSH
T1251833FAC0B72AC566CDCB3C06A07C7149E5BC58DCA9422F3251E96159E3307BB90ADD
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1435328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths