General

  • Target

    winlog.exe

  • Size

    1.5MB

  • MD5

    f98c7c35d5aeab1deba37a69f8c8ae61

  • SHA1

    8a680f2ac3b2ee6c129b691da4cf85b1d80540b8

  • SHA256

    e687214e3df72022154f3cd094550a93d78a96c9e9e4f1dca71ca48fc02e5eae

  • SHA512

    bfff630d2ce778cfb60446c6a9f1a8b3055aba7200d48330b58d4f9f01d02caf9a9a0b1cddba44e0ecc07e268122d0ce3df79305d9aab70124261f0634b5695c

  • SSDEEP

    49152:qyFr1e7lD3dp5Gr95O42RSMFvG/LGNZE/:qyU1dp0r9A4ASGvMLGNZE

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • winlog.exe
    .dll windows x64


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x64


    Headers

    Sections