General

  • Target

    EmberGen.exe

  • Size

    15.8MB

  • MD5

    bb6bd9f09c70acb22ff432a6870fa71a

  • SHA1

    5e6c5ad9dd2487fc70c29eb35301004d0accd279

  • SHA256

    03f833c81a847366426c6779a3cd27f6d88a65c8cbdb0026f7931dc49ebcbee8

  • SHA512

    442739fe138d80b4d178b7eebb989d282de18108518205f1dc1eb90b0e025467b0321799ae9f281a96f0aa938b2d34479814d3ab57146298ae3bc24cef07f0ee

  • SSDEEP

    393216:nqpHxeE5taqTk9t60ixAzgu40UirmRAU6zn7G9CVmP9w6:YReE5taqgBiIc0RyRKzn7GUmj

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • EmberGen.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64


    Headers

    Exports

    Sections