General

  • Target

    0ce5aba8ab08ebd7ed6f9a941781fc0e

  • Size

    11KB

  • MD5

    0ce5aba8ab08ebd7ed6f9a941781fc0e

  • SHA1

    9f9e4d9c04588dcf1d5bcadd34cab3e741884a50

  • SHA256

    e4947d4610d95e1be8d8e6c9c79c98109a1d34fc28e015d6e6bdd771f7f7482e

  • SHA512

    9b9f33832c513a66ecc78533d35bb3cf1bbf1d082b760b8cc1173034ca59aadab5e45faef6818ec23275ad7bcb82a1d405d71f95cf50064b935a8aadcdf1e957

  • SSDEEP

    192:EEd+QtSW3reJ6/Xb9B3B6TAwFK0D0td1IBHlq09CfdYtLnDXt5:EO+QtqJI56lK0I4AdYtPt5

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ce5aba8ab08ebd7ed6f9a941781fc0e
    .zip
  • Hookers.dll
    .dll windows:4 windows x86 arch:x86

    bf4e118779acb0dcbad6f685a42d75ff


    Headers

    Imports

    Exports

    Sections

  • Minimize to tray.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • www.filipsprogram.tk.txt