General

  • Target

    Wiseg3ck0-AIM-DDOS-.rar

  • Size

    148KB

  • MD5

    bcf4d44ec3550604560b179b481d47dd

  • SHA1

    7705ceaba60cf8d6f31391c0047afb066420e315

  • SHA256

    cacc2b38114734796f08f41d238b7f9f2b74a1a9fd2de2ef42fd756b1fe1359b

  • SHA512

    8397b77a7035967a5c6b1286dcccfdd488098fa0beac9c97af13d68a835256227f1147fb6ff2c3291026f34a6a59df68f72884883d1c16761d3fde55bd97bdb1

  • SSDEEP

    3072:Y2qQs4OZ0mkSiex4gBSparGsTqM6IqK7zSizSZIwggMdjQAAYc:V8sVexBGn9ozSizSZIwggMa

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Wiseg3ck0-AIM-DDOS-.rar
    .rar

    Password: infected

  • Wiseg3ck0-AIM-DDOS-/PSAPI.H
  • Wiseg3ck0-AIM-DDOS-/PSAPI.LIB
  • Wiseg3ck0-AIM-DDOS-/Utilitys/upx-scrambler-3_06.EXe
    .exe windows x86

    Password: infected


    Headers

    Sections

  • Wiseg3ck0-AIM-DDOS-/Utilitys/upx.exe
    .exe windows x86


    Headers

    Sections

  • Wiseg3ck0-AIM-DDOS-/WiseG3ck0.dsp
  • Wiseg3ck0-AIM-DDOS-/WiseG3ck0.dsw
  • Wiseg3ck0-AIM-DDOS-/main.cpp