General

  • Target

    4af164539fe47ad06b2ec763659a9a372e5a97ab4afa531e67ddb945549fb665.exe.compressed

  • Size

    160KB

  • MD5

    6d7889450effb898dd65a6e21e1e65d8

  • SHA1

    ab96f2047c8fa0b78cb0d0c53cb5457787775432

  • SHA256

    f453c5bdb90188bdd3c8089f1b891c03bd13cfb0dcc4b6cdab12fd4d810079d3

  • SHA512

    464c1ae9b88c105158f65849eb3adb6077c974c2188c05492b0630eedeeff49937a7da9a332fa4206dcd2f92bbfd41e15f41ffa90452bcfdaf1125f538678ba8

  • SSDEEP

    3072:nFB3O3IRORghwODMJlz1dxoOXwupfAwIFIKmk/w3JgBhqkLZiufFCL:FBZcIDqvysbpfdVKB3qK+

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4af164539fe47ad06b2ec763659a9a372e5a97ab4afa531e67ddb945549fb665.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections