General

  • Target

    bOd2.exe

  • Size

    231KB

  • MD5

    eecea41caa95753e359f345dc9ed6b2d

  • SHA1

    fdfc512a622ef9751497e9ef9715ff24bb98c3aa

  • SHA256

    889008d2491e5f92d86a36cd32374eee10e745cc310bd97b23ca17c0735bb061

  • SHA512

    ca51ec1d98c10bfc35c4ed83dcfa53a194dfc024e25f88e4980531ab358f5a91782dcc16723f1998db763e94b3e330dc3028761ce19cd7ae56ee69c577f2e96e

  • SSDEEP

    3072:eY+nUGacGYMUrfG+jBQKLqx5tIopnpjTRHqUmnP9qXLYfu5Cno2uIVvuSNXKzUZ4:e5aclzNBDG1BTpqUml2LkuInoJmVXKz

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bOd2.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections