Sailya[.]zip | Triage™

General

Target
Sailya.zip
Size 3.4MB
Sample261104-wv93astvay
SHA256 6ff2f636b79653928f48abe11569a32bcde465760e3e7211b0d174eebfe8750e
MD5 1affdc03f60decf0981f755b01360ff9
SHA1 0ce944892df7e9441fa3213a3edde8e66c835008
SHA512 15e30539cecec8310e5302dbed59f3ed604027c79fc6475e2b4ad3330cd3847feba28afdc8b3de165a9378ee7291ec8110b96cdb19d2a59c92e17d45a977e3b3
SSDEEP 98304:Kn4HkLHOOHJOO0Imm2k3k8k31GetXWuDeBpfD5e:EqO34mVkr31tXhDe4
TLSH
T1D7F5333684431C4BD2AA46D16E8ADF0766E7C4A4AE674DD3FA00CF737C3615C8E64BA4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/Sailya.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Sailya.exe

SHA256 6ff2f636b79653928f48abe11569a32bcde465760e3e7211b0d174eebfe8750e
MD5 1affdc03f60decf0981f755b01360ff9
SHA1 0ce944892df7e9441fa3213a3edde8e66c835008
SHA512 15e30539cecec8310e5302dbed59f3ed604027c79fc6475e2b4ad3330cd3847feba28afdc8b3de165a9378ee7291ec8110b96cdb19d2a59c92e17d45a977e3b3
SSDEEP 98304:Kn4HkLHOOHJOO0Imm2k3k8k31GetXWuDeBpfD5e:EqO34mVkr31tXhDe4
TLSH
T1D7F5333684431C4BD2AA46D16E8ADF0766E7C4A4AE674DD3FA00CF737C3615C8E64BA4
MD5 SHA1 SHA512 SSDEEP TLSH

Password

2419

SHA256 3d2ee83372204d6da214816766b588cfff2f4eeb4b07022ba720e87f86138d66
MD5 6ffa3f7af090ad274a97a62278cc3040
SHA1 93a353bacc89e3c1b357127fd4c662ac2c67047d
SHA512 edb93a5a05b0690c659c9456489ca21c79da35cedf929c31a917264c410bcae6dd4c1a851e746114406667f872c700179ed26045229f0cda9ec26317e71c6b75
SSDEEP 49152:clXQ8C9U6z1gmc6Le0XOejKpYzaL0sm1VkI8S2vgwNvAuMLf80nu8Oef5KAsblWK:4X2Lg3MpGpxL0smDVdtnNO05KIQwFeV
TLSH
T157F5330BA0ED8610E683043F04E5614772E8A85EE49D476AA16FF6398E27DE17FF7409
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12919248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths