Overview

overview

10

Static

static

10

1e80f20590...da.exe

windows7-x64

9

1e80f20590...da.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e80f205907f1d2a132ad67431cfeecfb77927cc2e78ff9f33d365245367afda.exe.compressed

  • Size

    160KB

  • MD5

    dca6225d3d332c2ec79542402e6b6de9

  • SHA1

    316e315f6508f101741e9343847c04a7b78164b4

  • SHA256

    a85f0035facb8afd5968eae33b9e5f8bf61f56fc2689c58fdce505a75ee8cc1e

  • SHA512

    c6d8b5b596f6a8aa6dd65a741577328ec46eed0ded5f01c6abd54cf3e3b99965bc7002e024448da841306f89a154064a9bac6870beee7b76ab9a0e6966b40a0c

  • SSDEEP

    3072:sFB3O3IRORghwODMJlz1dxoOXwupfUB+cYEAlAuOW4BjzuThJagjKAB4z:6BZcIDqvysbpfhzTlisagjK5

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e80f205907f1d2a132ad67431cfeecfb77927cc2e78ff9f33d365245367afda.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections