General

  • Target

    a012c0617eb64fa6d6abec68e77d7d2c3c2e0a8e2aad8be194966460d9bffa17

  • Size

    5.3MB

  • MD5

    128bf6e813600a7e217c654cf3804a75

  • SHA1

    0753f60ab40b5d31f56eaf070f37d703d388eb0e

  • SHA256

    a012c0617eb64fa6d6abec68e77d7d2c3c2e0a8e2aad8be194966460d9bffa17

  • SHA512

    8fc62c59401dd822ad16f830bb50ce092d1626add77ef5a5b04f26f9bfcd45e4cfdd29463498ddaad8b739ce1fa253f242a341d3bf2a5479a9329dc924d8e887

  • SSDEEP

    98304:0ylXzcmyHpdq08ZtojDUhDelytKIgaaeGd7tJtg5r2G8AjUOOn:0uDwHiNmjDzlGKbaaRd7RKrjje

Score
10/10
upx

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a012c0617eb64fa6d6abec68e77d7d2c3c2e0a8e2aad8be194966460d9bffa17
    .exe windows x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Exports

    Sections