General

  • Target

    cd6216e237f9005c8fd9dd7226b7d63e

  • Size

    1.4MB

  • MD5

    cd6216e237f9005c8fd9dd7226b7d63e

  • SHA1

    0bd2c522b02772e1e28f98064959792d9308a313

  • SHA256

    31a643afb563c602c0985b40788ce5a0c0bed87123c916baff0a664e132d9e79

  • SHA512

    e146dd477c86668a1625c92ec8756fdddf4896c1ab7a4ecc99fe7e3a6d0c1b77993e2854a07bad94d59fe6308e0ff03690fda926bf525212c7606ff197a5f802

  • SSDEEP

    24576:r5+kiX8lJBLMHZrMm1A2vCHespF/uCLk+/xPv45MYhBCXxU2mb2cN:r5niXcKZrU2vCHeikQPQ5MYhBWxU2m24

Score
10/10

Malware Config

Signatures

  • Detect Numando payload 1 IoCs
  • Numando family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cd6216e237f9005c8fd9dd7226b7d63e
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections