General
-
Target
ghkhfflfll.exe
-
Size
370KB
-
MD5
65f31914db3f9014aa7fb4190f10ddc4
-
SHA1
28919c49e49640736a6592b1bbd19b2c70bb3f16
-
SHA256
e3f6c77fb793b397f639d83841da0dd0221ac3b10e3b8a77e51388ffd9d5049a
-
SHA512
c8bb47a7f5a00fd164cc8f562c5d33d9ddd88cdc8a560faaa83fb542867d99125f89f28d2d0a9c5e31e269e0647712b993a734585efd26466eb3e12c17e89221
-
SSDEEP
6144:g+ssXv5jUA2OpjesAOfoTb+v+90TveVBciZnbCUxP4C9tgf/AN1LtdReCBJJKKrZ:qOv5jKhsfoPA+yeVKUCUxP4C902bdRtF
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
ghkhfflfll.exe
Headers
Sections
-
out.upx
Headers
Sections