General
-
Target
curves.exe
-
Size
552KB
-
MD5
6ae9e6b744b2779965c89e3bebcefa94
-
SHA1
a7b7ee4db5d3934f250e867d450c84aec09c75f8
-
SHA256
a4d3d83b3d71b7aaba2dc83f5900ba3d0fdbc8a2a3d7d6fb763c7100d4fd13d6
-
SHA512
9b425e9711f6bde661bc914bc7171990216d77504e7f83e736753892df0cf8e10cd69a2005e770b72472c7abdc8d428894a2e18880283f0f8ae85a1570b4fd2b
-
SSDEEP
6144:6XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHSsAOZZsAXFKuj:6X7tPMK8ctGe4Dzl4h2Qnuos/Zs
Score
10/10
Malware Config
Signatures
-
Remcos family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
curves.exe
Headers
Sections