General

  • Target

    0fdb120d4af81adfc915b1eb74938f65f6882b5c6f18e043522c1f5c7062bb7c.exe.compressed

  • Size

    160KB

  • MD5

    f7481cbc9af6ce5cb845353d23916ac6

  • SHA1

    22ca4c52e1426683d5351c98999a7d1d5c19a70f

  • SHA256

    9e58be24d0a73735b694ec204b3717f3cfddc7bad1628d06d763cc6fc1054917

  • SHA512

    99ead97f97104c25956c7e877434edeb15613ac1c3055e219d9de587e3aa4a88f2f4a9d0c316df3ef6c923b2baa4db337503f83613fdd5b2165d6cd6afd99b36

  • SSDEEP

    3072:pFB3O3IRORghwODMJlz1dxoOXwupfBpa8KxDiHPXKkrJS:bBZcIDqvysbpfBpa8IMfKx

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fdb120d4af81adfc915b1eb74938f65f6882b5c6f18e043522c1f5c7062bb7c.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections