General

  • Target

    bOV2.exe

  • Size

    232KB

  • MD5

    839ee918186c40f1aefdb9324b76d23d

  • SHA1

    5db2d355e463938d31f769055ba198847080c8d0

  • SHA256

    1a5c013bfce405b156b314d2bac3db8f4e4bff2641ecba752416039c5dff5f2a

  • SHA512

    fe77e80f0975f3b556bb8129cbc5665b10a5483c47962c507f2cc5b8bf8fe745a9431b126bbb1854ee8677113385c9cf591dce533d27a625ced6ea8c9382cbbb

  • SSDEEP

    6144:MvGSN9gWuLpcBKnVBYAsmrzpyDfOXXV1B:MvbGWulcBKV3uOX

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bOV2.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections