General

  • Target

    Cha.exe

  • Size

    232KB

  • MD5

    24216ada6e1161149256e3ca387655f3

  • SHA1

    8fc2d03837836d6a2e6d2bd0a18bbb9a1d65ba0c

  • SHA256

    5d57faeaf1e302117cf4121fd6a6f9e3391748f3afc8feabcb7b444c434b85e9

  • SHA512

    6e65258468951e81e8cbb9d873645818a7d23c477140c982b188793691bb41070ab56d29ebe31d62bbe13f7f79f08da67784edc1e9c2bbbe0bb43263e38fbabe

  • SSDEEP

    6144:J/J1txdYJEpFQEg2qFsxtjcHmEs+mZJG7P7Ddjh:J/J1fdQwPEWTOm677P7Rjh

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Cha.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections