General
-
Target
bRaA.exe
-
Size
233KB
-
MD5
5b876bd9a2608e8de84f55b15079837b
-
SHA1
1af678980340e58d5ccf2f83d5d84a5685910e7e
-
SHA256
bdca4b93d9d26ac631324c961fd814e25b7bfbb7d38c8fc2503fc4dcb79e7268
-
SHA512
13bbbaac9ce7a657a6ab2c45c66b02b24b94946a0cccd77159569bb287f629e3a04a04ed29701f733a239c26a5f47484a42370d250032f629616dad987110e28
-
SSDEEP
3072:HOSI2I7txG68nYrugMZJMfsciIpuKNtrUQlAK3qSjYPS+IAXb3Ixi5eFrgurIlNt:uvG68YrvM80ypnjAedo3qiGUY2ChzI
Score
10/10
Malware Config
Signatures
-
Remcos family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
bRaA.exe
Headers
Sections
-
out.upx
Headers
Sections