General
-
Target
DFIR (1).zip
-
Size
2.8MB
-
MD5
860c2bda2efbbc6bc2d518f886d003d1
-
SHA1
a2b44e47134a247bd1d4ae5126a0bd80468e8a0e
-
SHA256
2b2c8c45805c51153b46502d503a1cdd1034dab53ef568c113de3e21d1df8e60
-
SHA512
871dc93d87cb6ec786c652e72c7bfe46cd3ca48dc22968a63f66c24a01c0f3d6187fd2b0186c392db975601144e70d8c3faac6c982e10ec8aecf7c16e6c75d6d
-
SSDEEP
49152:A5W3aiH9S/bHH4DiHtwih/gkeXpC4XVoQPT4se08jh86Dgu9i:wgzH9S/LYDiWi/rEw4CQPT4vDgJ
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
DFIR (1).zip
Password: qm
-
DFIR.pdf
Headers
Sections