General

  • Target

    543583a835f9ee173be1f48afd1b9a7dd488f2ada3e7157cb693dd1b4fc6ce37.exe.compressed

  • Size

    160KB

  • MD5

    22a55c2952cd8f7228fe574cb7d40753

  • SHA1

    3ed534f2ce396695ece10b277b79efd8f5a5886f

  • SHA256

    302382ab44b4613dc0c1f4566df307cb8b1642bfc526a37cc6bccaa5b2bcfaa6

  • SHA512

    82e205666e7d8a75c5759c58578a0ea5c5dfcb8f2f2da0617d15a78bb950da58e0918d513908356fa738b6a32a5adacc7a5d874afa11076a2e23a7149169abe2

  • SSDEEP

    3072:WFB3O3IRORghwODMJlz1dxoOXwupfMM6BWv5gcRT/+GD8wBZNV/LDeSf8i2m1u:4BZcIDqvysbpfMM6BWhgGq5iZD/+ziE

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 543583a835f9ee173be1f48afd1b9a7dd488f2ada3e7157cb693dd1b4fc6ce37.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections