General

  • Target

    e40bafc77a42d6a3806f4d4aa9b44d2b

  • Size

    2.4MB

  • MD5

    e40bafc77a42d6a3806f4d4aa9b44d2b

  • SHA1

    6a2798eee6ce4b51fd71bc1cb30c3a2b91e3f6d0

  • SHA256

    62aac67e33052f23b8466a34cffa9b320aed6e14b5c45b3d245e12d4794c3133

  • SHA512

    0ad9cfd942b556a68b925e6e8001835726d6989804ad1b59684ba89f19527aad1ffd70b1334c9b3c23ddfcbde8bed33f60183a99b587205f2b45e4e74f12530d

  • SSDEEP

    49152:n3+pFfdjecsxUbtHe3dcTCyZSvQg3sqfKUfEkmN9jd12YE:n3EFflsOxe3iTC/pJNEzL4B

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e40bafc77a42d6a3806f4d4aa9b44d2b
    .rar
  • root_tools/JZ5U绿色下载站.url
    .url
  • root_tools/root_tools.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • root_tools/使用必读.url
  • root_tools/使用说明.txt