General

  • Target

    71f0e89fc1b15d16b42233db03af270d

  • Size

    478KB

  • MD5

    71f0e89fc1b15d16b42233db03af270d

  • SHA1

    291536f1fa110ab56f9c3844829eb05dffeee6d2

  • SHA256

    4e7a98e2271e9daebb7acdfb86a360866d88955e9a0774452056bbd771fd1b84

  • SHA512

    80ec42c7c7d6de65c09bb1619ef6c789c296d6c094c43a872af8dbd0b6412a48a0318a0e360801b5e97a89178b268b640561cc77d3344a2c54f0a6443df4f82f

  • SSDEEP

    12288:rk0TUaiuaB2S4lFoHTrkqC0dHMa4f5txiO6m:QqLaBKlFozrGtaIb

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 71f0e89fc1b15d16b42233db03af270d
    .eml
  • Quote.gz
    .gz
  • Quote.zip
    .zip
  • chii.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • email-html-1.txt