General

  • Target

    3021428ee2e2a4403f65c532b3b50de3df8691e5b5a45ef1752f8a1e9213aeb5.exe.compressed

  • Size

    160KB

  • MD5

    5026efc9f8c5075524f0d61892d2a89b

  • SHA1

    a7540a08746477d6cdc204746cb29ed52f7fa4e3

  • SHA256

    3f0af48d464f7040f5dd6b4a47de5ba987223ae6442613b88d30f382f4751295

  • SHA512

    cdacc707344cc75185c93125d951079fea53d5b52f2ad857786140137a53550828d77710034276591dd09bb27ae05741501a4f225237729af1b1528344cebce8

  • SSDEEP

    3072:GFB3O3IRORghwODMJlz1dxoOXwupf/II8bdie6I72qUDIPMQsmMVt+HbWg:IBZcIDqvysbpf/I5MOgLfTq

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3021428ee2e2a4403f65c532b3b50de3df8691e5b5a45ef1752f8a1e9213aeb5.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections