General

  • Target

    DBWinCheck.exe

  • Size

    385KB

  • MD5

    b9ddc2803b9f727d4c07357154175b72

  • SHA1

    a2f9b000ff1f4090ae1a326d014b92bcd6ca738d

  • SHA256

    7a27301675f3664b29e2ebf6e9bfd2cbeb85df50a1dea431c9467ef0a8d10426

  • SHA512

    211a02c570864b2f68c683eeea4b0a42280f2a1dbd8fe1d53b2b0c8c9b84aeda4293f306c81d46dddb45335aa02e97125aaa9e0c57c2a67e89a1e0f49a2b2ad7

  • SSDEEP

    12288:KfnnK9zABs+TbFx9SXOPCf8DkqAR8zHV85OtdL:KfK9zUHFpi8/Wk

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • DBWinCheck.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections