General

  • Target

    Setup--v7.0--VSE--Quarantine--Restore.exe (1).7z

  • Size

    392KB

  • MD5

    e55e3e3c7b83009d5452dcfe54fd89d2

  • SHA1

    c2fe1c82baa97d96953c92ce1ad3f33c7e807fcf

  • SHA256

    2241b0ed091c0762722dec8cc9b80a9131103ca691c8f4e3eb87301b872d5b8a

  • SHA512

    f4f77907443b948e23904b5357941916bdac467283eb04cb55df172bbe221776b8464949afee930586da79726788ed7f6f9ba325466922030c16aca4c2de3fa8

  • SSDEEP

    12288:5W2WGV5A53YmxrQ3PVf39DlC5mIfPnp+:IGVq53Ym233ZCBHp

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Setup--v7.0--VSE--Quarantine--Restore.exe (1).7z
    .7z

    Password: infected

  • Setup--v7.0--VSE--Quarantine--Restore.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections