General

  • Target

    tcpdump.exe

  • Size

    659KB

  • MD5

    672fca07fd855bf882c057c0b70b6ba0

  • SHA1

    a06891419fb7eed4b01c039a973c63db45f244ef

  • SHA256

    2cd844c7a4f3c51cb7216e9ad31d82569212f7eb3e077c9a448c1a0c28be971b

  • SHA512

    4cb374186ac75343cf34b9a63910fd7f80b465e93130fe816fe793f7d2d04a96958e32ce04f4d013803e7cd8d0370c78355850af92cf8807853484f32b051f79

  • SSDEEP

    12288:74TBdzXWCe21pEn8wLuChMvJTtxaxKVnMbOYZzT/5dzoRh5gWy86Z11zEaRgIOJj:74T3zXWCeqfxaxKl5a7PzoRh5op9waq9

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tcpdump.exe
    .exe windows:5 windows x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections