General

  • Target

    52d4a27f0344d9c7380c595da9b9165742c3e96bc41921ddbdba2cd913cfb322.exe.compressed

  • Size

    160KB

  • MD5

    cefe26edb2276f6333f0dc777b001ec1

  • SHA1

    4689ff665f5123f7078b9417d1c00b06f3730088

  • SHA256

    30ffa1173eb2657cad7145c05f96c383a8fa6edf7a3dc65912e987319ff89bd1

  • SHA512

    e33c82163194c1d8020c92d80ad69184690e6b2530d014dca9b20ca1afc8e4700cb48ad2d7714d8dbcf2d3dd872e1f5c2cb60e4db56d5b3938d4ebf7c2dc2b09

  • SSDEEP

    3072:RFB3O3IRORghwODMJlz1dxoOXwupf4oj48Tr/F4RO+XRsd9Oeg:zBZcIDqvysbpfN48nN4WU

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 52d4a27f0344d9c7380c595da9b9165742c3e96bc41921ddbdba2cd913cfb322.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections