happ_windows_arm64[.]exe

General

Target
happ_windows_arm64.exe
Size 3.4MB
Sample261110-pene2afb96
SHA256 0f0782cea01c7b6a441590c915cbc2bd926a57d47284851f14078de271f49bcf
MD5 29236239805a5cfc49e4f6713c8c485c
SHA1 fd8d2529a2f8c12c5606025d97a165d2534ed910
SHA512 cf0388437274f53f8d882ad0db8a8dd10eea77aa8c460c8446f9458338e0512d90e0ed666550723621428d415f1e4fa21ea22964d6b66ef717b110ef4f077287
SSDEEP 98304:7IMgr3NJnxoFw9ald3OfeiJfTiMYApogZT1VA4qCYX7rH:Y7rKFt6/5eApognvqCu7z
TLSH
T182F53328E58C395DFBE695716ED984379824C6B7DFA9F19C0C632AC3160C26473ACBD0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
happ_windows_arm64.exe

SHA256 0f0782cea01c7b6a441590c915cbc2bd926a57d47284851f14078de271f49bcf
MD5 29236239805a5cfc49e4f6713c8c485c
SHA1 fd8d2529a2f8c12c5606025d97a165d2534ed910
SHA512 cf0388437274f53f8d882ad0db8a8dd10eea77aa8c460c8446f9458338e0512d90e0ed666550723621428d415f1e4fa21ea22964d6b66ef717b110ef4f077287
SSDEEP 98304:7IMgr3NJnxoFw9ald3OfeiJfTiMYApogZT1VA4qCYX7rH:Y7rKFt6/5eApognvqCu7z
TLSH
T182F53328E58C395DFBE695716ED984379824C6B7DFA9F19C0C632AC3160C26473ACBD0
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12928496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths