General

  • Target

    32c30116d02e9af5f395ece35d3cbb40c0d6fd47e8a70541f4a95d0f832710c8.exe.compressed

  • Size

    160KB

  • MD5

    8a9487c905b11edc9fb0b31179af7277

  • SHA1

    00ee571a0853185ba09e2b06e714a1f29e3e8f00

  • SHA256

    7f39152f8b5ee8da118b4f4477500e50fe830d32b09bf43b2fc5e5377c285fff

  • SHA512

    0f4a535b95922118595d3a6359f40748c1c8831f7b1f0230b95798a49b4ca116a00cf69c8e80d2b9aa0584c8b6a3d3b1573510b51f1de82084560ab8ba8b3e5e

  • SSDEEP

    3072:lFB3O3IRORghwODMJlz1dxoOXwupfTwIz6I72qUDIPMQsmMVt+HbW8:nBZcIDqvysbpf8MgLfTi

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 32c30116d02e9af5f395ece35d3cbb40c0d6fd47e8a70541f4a95d0f832710c8.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections