General

  • Target

    Reservation information (date, name and etc) (1).rar

  • Size

    75.3MB

  • MD5

    4cd4786a3b615b2c884865ce1db051c4

  • SHA1

    0fb49e1aa32c0bf257425724886a7760c79f763e

  • SHA256

    b6abf8a3d5e865b0968637b92642fbaaf328dad7f7e750284c95c68600e293bf

  • SHA512

    6ef00733e79816a4bfa39dd397250ab9387be64845bc2bc5a3f2c43dc659e5271b56037510331f16f646c647e6bf4eefe4509047b6a9ecbfe85cfb1013729f4f

  • SSDEEP

    1572864:y87OYjPb/eWnmtmDpqKdUbxAzOohf+g9WpoX5j4R5bsWtF4fgabM:y87OM/eeDpnSbx2Odg9CoXt4RD4fgaw

Score
8/10

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Reservation information (date, name and etc) (1).rar
    .rar

    Password: 123456

  • Reservation information (date, name and etc)/Reservation information (date, name and etc).exe
    .exe windows:4 windows x86

    Password: 123456


    Headers

    Sections