Overview

overview

10

Static

static

10

DotRansomw...er.exe

windows7-x64

9

DotRansomw...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    DotRansomwareBuilder.sample

  • Size

    143KB

  • MD5

    e224ec176f6a421cb38fcd5f146f1f73

  • SHA1

    0ed3aa5cb559f66b580b6edbe1ed68b589c89cf4

  • SHA256

    36240c19c52f31f1981a60170bb9ee9651a709d249e98b0690bb1b5422664f80

  • SHA512

    9bf7ba298bd40c9363a162a144e6b606c627848265f5a1c93d6323395399c58207b1867fed1e1776f4f415e74736f5a258426a6b018c8dbc96560940535d3391

  • SSDEEP

    3072:yNBWzpNqnsLmn9aUPbV6E6phomz78Z4YxhSVcDTKAZt4E7/:OkpEsLy9oHphlYZ4YxhSVcDTjtx7

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • DotRansomwareBuilder.sample
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections