SecurityHealthSystray[.]exe

General

Target
SecurityHealthSystray.exe
Size 89.0MB
Sample261014-epa8caysdy
SHA256 de5f62db19205b40064ab88342ae8ab6f4acabc5cf637f443fc1f053d8bc0bbb
MD5 341a8f93558cd1a96ef87f43ed63681d
SHA1 dd1bc8d06263a6ac116fd8182d0fcc56fd8fceb1
SHA512 ae83c17142e62862ea87011f63268f37da9640085f505bb215e49b083745a4624b62010d871c4e02d98398864ff35994dbb0b0bac6adfcba7e64dbd26f4a055a
SSDEEP 1572864:Dwi59nUyVlFs4qfOZB2o5Jw69z2S6Ygo5mGERcWSnzeQLugaK/uJbCMzLQYCou:Dwi5BpVlFPqfO6o5G6pgGER/SnztEK/v
TLSH
T1DC1833F4D18B4B141FC69257CAC09E42DDA9F8ADE8074B6D7350CA9C61D3323B512ABE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecurityHealthSystray.exe

SHA256 de5f62db19205b40064ab88342ae8ab6f4acabc5cf637f443fc1f053d8bc0bbb
MD5 341a8f93558cd1a96ef87f43ed63681d
SHA1 dd1bc8d06263a6ac116fd8182d0fcc56fd8fceb1
SHA512 ae83c17142e62862ea87011f63268f37da9640085f505bb215e49b083745a4624b62010d871c4e02d98398864ff35994dbb0b0bac6adfcba7e64dbd26f4a055a
SSDEEP 1572864:Dwi59nUyVlFs4qfOZB2o5Jw69z2S6Ygo5mGERcWSnzeQLugaK/uJbCMzLQYCou:Dwi5BpVlFPqfO6o5G6pgGER/SnztEK/v
TLSH
T1DC1833F4D18B4B141FC69257CAC09E42DDA9F8ADE8074B6D7350CA9C61D3323B512ABE
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1465680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths