General

  • Target

    225dac45be32a420799c54024d89b6d0d7a947f5c65aec0639347e67caa8c2ea.exe.compressed

  • Size

    160KB

  • MD5

    acce476257bfe9e1316e146018965624

  • SHA1

    92b29e4f7cbd9b156ffe35e05a68444c5a184cb7

  • SHA256

    d11a5a12ebb1f094136c8566f2e8bd7cab4d88e50f08a8b13129e4564c5d66e9

  • SHA512

    a4ef0642b63d7cf1edbbe9e0f153904b20a2e358cc471573f44ea40ea4e2cfb83b6fe5e5cf76ba0388ec17ff01e1d1716946ec528aff3e9f08ec5e52fd868e46

  • SSDEEP

    3072:9FB3O3IRORghwODMJlz1dxoOXwupfN6FivjGdlEeeE6B17Fh8Esp9J5LOUN19:PBZcIDqvysbpf6MjGdNSFnspN19

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 225dac45be32a420799c54024d89b6d0d7a947f5c65aec0639347e67caa8c2ea.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections