General

  • Target

    56fb01448d362477d13caec4d8ccbda889fd3935f3a496f2918f39cb4b30a9de

  • Size

    3.6MB

  • MD5

    bd299a4b3e1a2d96478dede131820023

  • SHA1

    8c77074dfa09f360c1986dba2f49f321ef508aaf

  • SHA256

    56fb01448d362477d13caec4d8ccbda889fd3935f3a496f2918f39cb4b30a9de

  • SHA512

    d70331a97beb3649eecf3143fb941e9357460b2c26c2afb62f2aaf5e9cf489f6924efc17a6f7ca784d632daae9114089e960e6e31b49d71355970ccf2ad87fbe

  • SSDEEP

    98304:bOKRGDz6izZgu+28RT6PRcbUYjkPlwds+6PpLFlCEkU8brix+cg:/2zXzZgubPepjkPWtWFHdkPCx+cg

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56fb01448d362477d13caec4d8ccbda889fd3935f3a496f2918f39cb4b30a9de
    .exe windows:6 windows x86


    Headers

    Sections