General
-
Target
bOkf.exe
-
Size
232KB
-
MD5
4fdc66a401be44f334dc87ee92a86dc7
-
SHA1
1f058b51e02d314950e69f6b0af5022a022d399d
-
SHA256
be7a5bef3222ae10270b899e278680c3a9d6c5151c18901e875bb9c1c7e8dbc2
-
SHA512
90fd728dba8e42b472196848579ceb09c4a17dcb1b73d7ff006a05f0ddbcb95ad14bcc7ae8bcf81d686884ae7304d443069f2fa21825d12c9cd3a6094f616853
-
SSDEEP
6144:yvGSN9gWuLpcBKnVBYAsmrzpyDfOXXVxBGr:yvbGWulcBKV3uOXS
Score
10/10
Malware Config
Signatures
-
Remcos family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
bOkf.exe
Headers
Sections
-
out.upx
Headers
Sections