16d48a3de4a36908b29cf8cb5928ab95[.]exe

General

Target
16d48a3de4a36908b29cf8cb5928ab95.exe
Size 8.1MB
Sample261021-tpde2aws3k
SHA256 2a0b9bda45128ba9ea799194f7cf2f4acaa868b13febd63c81d7cbc3da8a0235
MD5 16d48a3de4a36908b29cf8cb5928ab95
SHA1 e8dc9fc0c5a6319f599893eb19f450f075d5e1ba
SHA512 b1dd7067400d71820c608e777964fa8ee8243ae49c680a09e622b314a2cc62bcf221d9158ae0326e10af4b1ab2815da451f7e92828dc32022e948b7491964bb3
SSDEEP 196608:5S9eZJYV+mcVq6ywNY0+7i88UsKgzOOM7Vtvgr:M92++bVq6JN08UsdSOUVZg
TLSH
T19C863356A70E1DA1833F2C3327DDE9B2DBC5C02D48319850865FA3A3D67EBA93705D98
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16d48a3de4a36908b29cf8cb5928ab95.exe

SHA256 2a0b9bda45128ba9ea799194f7cf2f4acaa868b13febd63c81d7cbc3da8a0235
MD5 16d48a3de4a36908b29cf8cb5928ab95
SHA1 e8dc9fc0c5a6319f599893eb19f450f075d5e1ba
SHA512 b1dd7067400d71820c608e777964fa8ee8243ae49c680a09e622b314a2cc62bcf221d9158ae0326e10af4b1ab2815da451f7e92828dc32022e948b7491964bb3
SSDEEP 196608:5S9eZJYV+mcVq6ywNY0+7i88UsKgzOOM7Vtvgr:M92++bVq6JN08UsdSOUVZg
TLSH
T19C863356A70E1DA1833F2C3327DDE9B2DBC5C02D48319850865FA3A3D67EBA93705D98
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

60374848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths