General

  • Target

    738f61250438c22f2bf907ca387af9aa

  • Size

    537KB

  • MD5

    738f61250438c22f2bf907ca387af9aa

  • SHA1

    66bdfb78bfc6ddbf98b476c4b603d33373328001

  • SHA256

    d8a9e36affe9c2375f09a20ca2480d49299aa5c28af1dc02fc3fa3afcfefbebd

  • SHA512

    1d8c729b1294ac4396307af60db62185fc5f6e383943e291379aca06b6ddf0af34b006c45302e56eb8a340d1d59d1d0e335dbdaa8bfc254ff6bc7b279960be54

  • SSDEEP

    12288:2abSZk5WzPWAGjSwA5OgZAO3ntgZw4SZEx1nsO10SVxFoyImL:PT5WzPSbA5O03ntgZz1sExtPL

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 738f61250438c22f2bf907ca387af9aa
    .rar
  • hy2007b/auto.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • hy2007b/config.ini
  • hy2007b/help.txt
  • hy2007b/hy.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • hy2007b/mycodes.net说明.txt
  • hy2007b/web.txt
  • hy2007b/源码之家.url
    .url
  • 安装说明.url
    .url