Overview

overview

8

Static

static

8

818f19cc09...9e.exe

windows7-x64

7

818f19cc09...9e.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    818f19cc09293a861804ba866a6b6f27c32202c9507b5e5213d452907c4b7e9e.exe.zip

  • Size

    191KB

  • MD5

    3ac818dd95116d5f0cf99975793552a4

  • SHA1

    28e2f0855579c344bf26756ac12042d44bca81fa

  • SHA256

    1acd96dbd9e0986fcd35bd34ca2dcd6b7d199ac8f38ea0041cfd76e6990b468c

  • SHA512

    55dbd8bbff923b08007dccde9020fc8f46ed527986aa1f61eaff62d70ba9739e5e75e62afb344f72256363aa1f9bb55ca7b31ea22aedf9694530033e63ceb2f0

  • SSDEEP

    3072:wf0DiFsPBccmzQQW0xn8kYI/r0X2w5hlaWGzFQ9hdYDGzpYCNr95pIP2Ma320u1L:o8iFFcm9BYI/r0nNkzSy8G4bpINa320k

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 818f19cc09293a861804ba866a6b6f27c32202c9507b5e5213d452907c4b7e9e.exe.zip
    .zip

    Password: infected

  • 818f19cc09293a861804ba866a6b6f27c32202c9507b5e5213d452907c4b7e9e.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections