Overview

overview

10

Static

static

10

bOwQ.exe

windows7-x64

10

bOwQ.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bOwQ.exe

  • Size

    232KB

  • MD5

    12e6cd7b5a93a2fed042ff785b861914

  • SHA1

    a25b6ed104d41f87d16c61477d863f551547103a

  • SHA256

    86f904bd34599c076037e60fdc6e3773d26255bcbb60bdd3782dba976ed81d3b

  • SHA512

    e3ff81935794442b63b5b4c2d45be6c7969a628cbc027ba712c6fd145ce14567b01dfcaea82e47d94fb772ac61a16c04c3f162d0dd046fd43d1caf32aa5c3273

  • SSDEEP

    6144:LvGSN9gWuLpcBKnVBYAsmrzpyDfOXXVxB:LvbGWulcBKV3uOX

Score
10/10
upxremcos

Malware Config

Signatures

  • Remcos family
    remcos
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bOwQ.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections