General

  • Target

    3d03d01b7fa80edc7b3e20a74d39e9f43ac3a17ed0dff740ce8694cbe15fc417.exe.compressed

  • Size

    160KB

  • MD5

    57fd0c2a2d54bba3f49c26b9b4a0509c

  • SHA1

    fd77a6cc1d58a815ba2a5b344d3c3ebecda406d9

  • SHA256

    017eb4a4efc9d519f0c0fafb18d533b26fce4dfeae08c5ed2ccc3c71b8bffb70

  • SHA512

    5cc2a1b54d8b2bf40a4288ccfb6f040104700945453ec09d56550a0b9ecffae492616f4c21e7232807a1f60211734ded49ebec1a78cf91b6a4e4b85da9630501

  • SSDEEP

    3072:kFB3O3IRORghwODMJlz1dxoOXwupf/VuVQMve1amaDt1cTVVGEOVSsgu7D3:iBZcIDqvysbpf/IjHmAETVzsim

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d03d01b7fa80edc7b3e20a74d39e9f43ac3a17ed0dff740ce8694cbe15fc417.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections