General

  • Target

    649e891dae4ee56c01d6b3c468beef18

  • Size

    60KB

  • MD5

    649e891dae4ee56c01d6b3c468beef18

  • SHA1

    e5fe46d85023fade5f0eac9e412592a680c243f0

  • SHA256

    e6f9787da4384f50d1a568c2fabe69f3889dd7171f2ea60f722fd90689049384

  • SHA512

    98fd9976e2a8efa6b7b0726df01512676911bc2a06a1cf3d477c9f2c300a37f7d721cbc62a379acef9990cde97780fa160727d2113fca0c3b4d8522f1a1ee10c

  • SSDEEP

    1536:fdy/HiS3KfEIOgEJf3tYvwRxR59ZaeJtZW0ah/AjmFbhGgBclT:lxNEIOtf3tY459ZaeJttjmtUgBclT

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 649e891dae4ee56c01d6b3c468beef18
    .zip
  • entry.nfo
  • file_id.diz
  • scene.org
  • shrooms.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • shrooms.nfo