General
-
Target
127974ae306f0e0434bc6bcdff0b141907fbe11447eb60748dbd43ae87c43c06.exe.compressed
-
Size
99KB
-
MD5
fc0cd8c09e1bf0954c69148ce27d6763
-
SHA1
b1876fdbde6da1f79c9dae609a05ac5abb46b3f5
-
SHA256
8dde13bc5834ca881bbe14707b2ce81b776783150c4a7a8e49b772fb6d610b83
-
SHA512
4141cf923e1c492fd9fe7219b0ca99fd1dcecc81621c6d2781037cf1fc8e58d5e13434932110f3dd2f23a245cb8e42d53ba3bb3401c72c6ab82a40497989cb43
-
SSDEEP
3072:/oiJSuICoVLop3pYTGGcBtkowoxxnNycSi7LTl:tguYq2GGEkowCFpZfT
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
127974ae306f0e0434bc6bcdff0b141907fbe11447eb60748dbd43ae87c43c06.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections