General
-
Target
LRRP.EXE
-
Size
56KB
-
MD5
23d0f67caef114cae8521a3f09482933
-
SHA1
81ed609a5b5983ecde630ec6669c839adfff1279
-
SHA256
8e5331bbbb2fc24859a0710c6f943e3e0d6c68d061c125cd05c2eed08e1881c4
-
SHA512
eb6adfecd1433b84498d267c9cd987fea3d4307dc4fa47fb1f9d511d7a6f12727e9ef12c945026a78ec261aa1d5ebcfe484b298e03d09f04e229f20b9f92a316
-
SSDEEP
1536:N41H+05RcSTFmdxcPSAxZg9C3Cjz+W8eKffkfIlITA:KNDfQTuSQG9C3CjCW8eOF
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
LRRP.EXE
Password: YOIN=Tp689~u%u7n6|)x
-
Device/HarddiskVolume4/SDRSharp/bin/dsdplus/LRRP.EXE
Password: YOIN=Tp689~u%u7n6|)x
Headers
Sections
-
out.upx
Headers
Sections
-
manifest.json