Resubmissions

20-07-2023 03:52

230720-ee6w9scf62 7

General

  • Target

    FreyaCrosshairEditor.zip

  • Size

    250KB

  • MD5

    0e5ee0b5c6f104ae96c3cf8785bb5d07

  • SHA1

    042de571b42680b58f1e459abbb1f70ee1616f9b

  • SHA256

    1c1eda81d9ff3ac630964d345f7c18588e10b0132bb212b77dfd8f02b6397fd7

  • SHA512

    d74fce1afb710816deb7903e05ecfa4c622c0d8f2e5f4f1b8696b54cd41d375ec865413107ca9e5596df0869172a4a6a39f7a5458a8ff82a32d8c38fc8a6d58b

  • SSDEEP

    3072:P87e1HnIPd5IOdmkCWbd0mVgO9yb11z9LIuPAVhjuNlswzfWOfkX7pECLvd2HlP:vHIPzIJHTO9yblIGAvyNfhfkNEGvdI5

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • FreyaCrosshairEditor.zip
    .zip
  • CrosshairEditor/Freya.dll
    .dll windows x86

    cbc458e67114e2a84ebb669d0530f7b6


    Headers

    Imports

    Sections

  • CrosshairEditor/Freya.hl.exe
    .exe windows x86


    Headers

    Sections

  • CrosshairEditor/injmthd.ini