General

  • Target

    800658dc58f5b399559085f2fd9266f82875410b988f037e44aa82f0682b4ba1

  • Size

    913KB

  • MD5

    d22fb33aa24a2b1efc650c43fe6c16a4

  • SHA1

    bb2b6ea5e274997e63da773e043672aae2d3e3da

  • SHA256

    800658dc58f5b399559085f2fd9266f82875410b988f037e44aa82f0682b4ba1

  • SHA512

    2edc02984fbfa5d45b0fb47a277c8991d256da6b51838eaa66ca6de42ee816c4e872c7419a451f285fe112c5aa41ead2dcb085a51ee37b591a7dd20b4ac2e009

  • SSDEEP

    24576:mUOkNBjSN5kkFg4zqzNztlJLh4oFGExNmn:jOnkkFLWBtXt4oTcn

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 800658dc58f5b399559085f2fd9266f82875410b988f037e44aa82f0682b4ba1
    .zip
  • hideIcon-file/hideIcon.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • hideIcon-file/msvcp140d.dll
    .dll windows:6 windows x64 arch:x64

    69008413b126816a04ebbfcc527e361d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hideIcon-file/readme.md
  • hideIcon-file/ucrtbased.dll
    .dll windows:10 windows x64 arch:x64

    2ba8486101f2f8ac913a5f44d425917e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hideIcon-file/vcruntime140_1d.dll
    .dll windows:6 windows x64 arch:x64

    033b9f3a70e23334972a343090114f02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hideIcon-file/vcruntime140d.dll
    .dll windows:6 windows x64 arch:x64

    b20752ba74b5a1d39b65aae6ef07725d


    Code Sign

    Headers

    Imports

    Exports

    Sections