General

  • Target

    4c8dbb37a7fa8c80d7a3c158227bd79a

  • Size

    423KB

  • MD5

    4c8dbb37a7fa8c80d7a3c158227bd79a

  • SHA1

    40db990a456dd25a1e44a3f4015d90f587cdd6d1

  • SHA256

    3485789763d153898ea140c7d1bddb66b4b176a3844d884c7efe5ad1387d8a48

  • SHA512

    29827de5db65b5a9aa7a421cce8d587d18752a7d846946c24544646df2c14bef43d76192548dd2c5edf19811c4d2d6de9169a68c5a9847a803c846fa8a92228f

  • SSDEEP

    12288:/93yYwXi3cfQ9JK4aX6p/whpHOQDfJ4QVt6Oe7CyKdNXDr6:OXi3J9Y4aXywhpuQTmQbeO5ddC

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c8dbb37a7fa8c80d7a3c158227bd79a
    .rar
  • backITup/Update.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • backITup/backITup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • backITup/language.lng
  • backITup/paths.ini
  • backITup/version.txt