mikrotik-lists-manager_windows_386[.]exe

General

Target
mikrotik-lists-manager_windows_386.exe
Size 2.4MB
Sample261027-p2bprac141
SHA256 6dd7aebe5e4b7f77f8ebdfe4a63467bc325eb322722ec81f3da3ddc31963afff
MD5 ab410ec940dbe02620d6a573f00555b3
SHA1 07ee68433cefe95de118392fe242356d7f8ad8b7
SHA512 d7a47acc02683b291a088f19f8d0f712a2ef86657e49265ad1da8b5bb2e06f8fbfa2616953f211088876eb0ce49d8215c6954c571b1604924763a3120f6c2117
SSDEEP 49152:ILjpD2mnkZsbzWm0wli8bQgSMfHDTAB4qGhyVTGCF6xzRTSilwnqJ:4F+ubzWm/dbpfLXyVMTSilOqJ
TLSH
T112B53314F81A9AC0C071FA309628252A54C15F39FEEE63335A9A297365D035DBC8DE7F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mikrotik-lists-manager_windows_386.exe

SHA256 6dd7aebe5e4b7f77f8ebdfe4a63467bc325eb322722ec81f3da3ddc31963afff
MD5 ab410ec940dbe02620d6a573f00555b3
SHA1 07ee68433cefe95de118392fe242356d7f8ad8b7
SHA512 d7a47acc02683b291a088f19f8d0f712a2ef86657e49265ad1da8b5bb2e06f8fbfa2616953f211088876eb0ce49d8215c6954c571b1604924763a3120f6c2117
SSDEEP 49152:ILjpD2mnkZsbzWm0wli8bQgSMfHDTAB4qGhyVTGCF6xzRTSilwnqJ:4F+ubzWm/dbpfLXyVMTSilOqJ
TLSH
T112B53314F81A9AC0C071FA309628252A54C15F39FEEE63335A9A297365D035DBC8DE7F
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

42540720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths