General

  • Target

    Trojan-Ransom.Win32.Blocker.jaty-005fa1ef4075c301537eee3e84393cecc5a5fa9e6a81cf81fd20cd921a3c9dd0

  • Size

    877KB

  • MD5

    cb0312ec0a09c89d0ba6b441d13668fd

  • SHA1

    defcc07c2d12effb2605dccb3b09627acbcc2812

  • SHA256

    005fa1ef4075c301537eee3e84393cecc5a5fa9e6a81cf81fd20cd921a3c9dd0

  • SHA512

    49fa066efb0d3065135c1d4851dc4b15118750caad5fc6bd11877ff91da05b1ee8c76c235f2582f4c2394a80de5f2596f1485987596e9fd201838ffd34c6e228

  • SSDEEP

    12288:Cb5syS5Z5Z5sy/yS5Z5Z5Z5B+G5Z5Z5B+byS5Z5Z5syS5anE5Z5sy/yS5sy/y/yg:Qeamez0a2aag

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.jaty-005fa1ef4075c301537eee3e84393cecc5a5fa9e6a81cf81fd20cd921a3c9dd0
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe .js windows x86