General

  • Target

    WRFNEA.exe

  • Size

    873KB

  • MD5

    83982e828c0f442e984294bd6d99818d

  • SHA1

    62f6716e3ccd57b02366b1be6888e0aad1776060

  • SHA256

    4673d37c459597b0a61e8ef11340aa5bf5003665a4c6177177fcbb28ce6b4d55

  • SHA512

    ba76c5c134c615eaf56751c0c88249911fbbaed81273e1e009c17d1da181eba674c33b3cd3a630e056ad456609a701eec7aaadbe412f368f70bb86099132135c

  • SSDEEP

    12288:56Wq4aaE6KwyF5L0Y2D1PqLMn6PosaYEeIPN11+FM6L1364tvF5ppRF9X0ELwit:PthEVaPqLMnDeVIl/aM6tZtvFn/F9qit

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • WRFNEA.exe
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections