General

  • Target

    easyMalicious33318a1424a0.exe

  • Size

    976KB

  • MD5

    d0a434c9c2594e884ac81afaead9367e

  • SHA1

    04f3913b886af8e8f0b2947526fa4e87243ba34b

  • SHA256

    3fa1443cb3e841158b15c322d668c90c228ecd1b2fdbf1acd0ae18e4dc4035b2

  • SHA512

    3c9d03b34b4c69d1f6a48fa90a3c0d7fe63e24a5f09643b1a26a7adcfef6dc42f30bdaadb5cc154cc6e6267bf1f535203dc76178948da85d7d2b9b967c7576d6

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxm:7J5gEKNikf3hBfUiWxm

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • easyMalicious33318a1424a0.exe
    .exe windows x86


    Headers

    Sections