Overview

overview

7

Static

static

7

DubaTool_A...42.exe

windows7-x64

7

DubaTool_A...42.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5853b8639bf4876ec7c0eaa3d41a2fc9

  • Size

    1.8MB

  • MD5

    5853b8639bf4876ec7c0eaa3d41a2fc9

  • SHA1

    35c1624ae1099babd194462928c185555b49aeb7

  • SHA256

    6a870d35dd66dbd7c64f1840610fc816f88218a6db6dcea049a0ad71e4615baa

  • SHA512

    01fad22b4c1153ad9cf380133f6b22bf64edd437ad4e385367c992983f774b415826a3779f1094f79ea9c1ada29e214a1ea2fc1eb157c2fde4de0ba8f2d2906f

  • SSDEEP

    49152:uKlqPwRHuwZRPWNFDvjGu08pAthMBpdD5os2htXyakZ:Bg8HuAwFDvi5rqpdD5o9htXya0

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5853b8639bf4876ec7c0eaa3d41a2fc9
    .rar
  • DubaTool_AV_Killer742.COM
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 新云软件.url
    .url