General

  • Target

    239ca52d8b60a582e2219f2b5ad3b83db129e15d300eb486b0392027d78fa499.exe.compressed

  • Size

    160KB

  • MD5

    94cf899790945aca27e8bd195b86ecd6

  • SHA1

    89c1cec977f49f4ae6fc7210c6124da59b40c362

  • SHA256

    a9debdce0f56f389f40d0ea6fd9a4f32e2ce145110c3443b76514b809d4bd63c

  • SHA512

    a0da04b295ca88ab20bff6e660ded513d3a44d43afbc80fc75c4625d7252fe8a386b0bdc92c90fa851bb8a7f29feabc2c5e572681866b7f68a868e5d7e4e70b2

  • SSDEEP

    3072:lFB3O3IRORghwODMJlz1dxoOXwupfPoj48ef8QNtDxb7CD7lX+kLwRzZZ:nBZcIDqvysbpfC48o82oOks

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 239ca52d8b60a582e2219f2b5ad3b83db129e15d300eb486b0392027d78fa499.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections