General

  • Target

    795e9bfe977051175311f20203032e06

  • Size

    97KB

  • MD5

    795e9bfe977051175311f20203032e06

  • SHA1

    c4485cf83683788c2644e072ac1c82a91598fac2

  • SHA256

    a1df4bce762641bad7618b62fa4cd3aae7fc02fc6609bb179a02ddfdddc45f16

  • SHA512

    18798c0be4b92f323352bc24eda3eaaf221916c7c92f90e594fb923599c6a18d4b4256458199070323e468bd36b5ee6dcb756351e0a11546a34f7c778c5588cf

  • SSDEEP

    3072:R0s5DyiKnuqvdQJLG5f8BUPijR5EAT1uo499uedBOJ:mu+iujQJu8BUPk5EguFdBOJ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 795e9bfe977051175311f20203032e06
    .rar
  • cmospwd-5.0/COPYING
  • cmospwd-5.0/cmospwd.txt
  • cmospwd-5.0/dos/cmospwd.exe
  • cmospwd-5.0/dos/cwsdpmi.exe
  • cmospwd-5.0/src/Makefile
  • cmospwd-5.0/src/cmospwd
    .elf linux x86
  • cmospwd-5.0/src/cmospwd.c
  • cmospwd-5.0/src/ioperm-0.4-patched/README
  • cmospwd-5.0/src/ioperm-0.4-patched/admin/install.c
  • cmospwd-5.0/src/ioperm-0.4-patched/admin/ioperm.c
  • cmospwd-5.0/src/ioperm-0.4-patched/admin/uninstall.c
  • cmospwd-5.0/windows/cmospwd_win.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cmospwd-5.0/windows/ioperm.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cmospwd-5.0/windows/ioperm.sys
    .dll windows:4 windows x86 arch:x86

    7686a774f1684e35f173f92d044b68bf


    Headers

    Imports

    Sections

  • cmospwd-5.0/新云软件.url
    .url