General

  • Target

    57f6f84ce26ee8e6282d81445c9bb74119b8d27a6ab84304b308db5f6be1a71b

  • Size

    633KB

  • MD5

    84b02a47baa406d70590a1c0e1610570

  • SHA1

    afb4b42b701fa095e6bcb4185a47bd73454d9ef4

  • SHA256

    57f6f84ce26ee8e6282d81445c9bb74119b8d27a6ab84304b308db5f6be1a71b

  • SHA512

    2cb6e8e2df539dface0d89d582285de99353d17e48713a0eaec3a6a7219e395a82330bcd91dc79b1f1607ccdc7bdc35069de20fcc9551a9edc09ab8de5172358

  • SSDEEP

    12288:GHvT5xY/jRrtJWtT6zwWfwK1C/TkXdxjprs1wRiDIH2psONkNrt3eE:EUj5+tT6wJK1rdse5O2NpV

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 57f6f84ce26ee8e6282d81445c9bb74119b8d27a6ab84304b308db5f6be1a71b
    .zip
  • rr990487.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections