General

  • Target

    8b9de2056ab72c6c20d7122903cf2418.bin

  • Size

    634KB

  • MD5

    314a5ffc957868b44bba794f3e77446b

  • SHA1

    c3248a43f735a766bb6559837dfab18ba263b3df

  • SHA256

    dc672275388df8354b25b6995eaa98421e4f7888dd367c1780a4c7d9cc76d031

  • SHA512

    1a2293999d8f38032276fd59aa60cc69aa1fcdfa09af218e015b0bd26ec40bfb4c89b85e7a142bc751ecfa271fa4f1ddc16cbfe46b04f25a107d4dab096e72a2

  • SSDEEP

    12288:yRh5ezEmEq5mLkKtSP6HOLxQYPuKlJiWZk4sYw0QM/vTzVcH1HV4mGDe/9wPh46:UhqEELPCHYadWDBwl+n+/45De/Si6

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b9de2056ab72c6c20d7122903cf2418.bin
    .zip

    Password: infected

  • 6fd650e4f7d88a81503ca6a6ba8d21abbdd0a6d14086bfff03d1b5cc89625eaf.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections