General

  • Target

    508b25474045e22f6650ddb466050c3f57b3c00d7fb2835b8c5a4ee894203354.exe.compressed

  • Size

    160KB

  • MD5

    cfacf59ef92fce5fc93413499590d11b

  • SHA1

    7cc5662288f28662f4e88dac27ceec83b70790b0

  • SHA256

    eaf87fa3ff10f2d5c07b9aee3850ad1f03248e2130d7cffdf875897d63971ef4

  • SHA512

    af94c0e53e19b4595aec48856129504c847587d6eafd79a47c291a7a668a87af90962ec74d7e39b9e9e1787290597091dd4abf8f956d1c05bf69094824b7733b

  • SSDEEP

    3072:lFB3O3IRORghwODMJlz1dxoOXwupfewIFIKmk/w3JgBhqkLZiufFCx:nBZcIDqvysbpf3VKB3qKu

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 508b25474045e22f6650ddb466050c3f57b3c00d7fb2835b8c5a4ee894203354.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections