General

  • Target

    Reservation information (date, name and etc).exe

  • Size

    92.9MB

  • MD5

    9809cc75b12ebaa98003f8288978f3b3

  • SHA1

    94a5a71d6548ea8aab5b03f5bc8dcd2c559ed084

  • SHA256

    dd5ed75d01cbe4f1957df72a058656e7b45cb1e2e74efa6eb796fe9a7012a173

  • SHA512

    6421e8cf53d93dcd48529ba7ec34a8b7cdf24d34886bee3828f12385942619e89345b205d0201faffaad60a0dd34dd9cc243230f2c4b9f5ce75bc1cb684125cf

  • SSDEEP

    1572864:Th4QkjGuWsqebzyuGqNMnKuEqHhaPd5nC8DDkeZZZZZsOKa1pVeOKCr7ZPE:l43jRWshbzyuNMnlEqIPrzDkeZZZZZsR

Score
8/10

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Reservation information (date, name and etc).exe
    .exe windows:4 windows x86


    Headers

    Sections