Overview

overview

10

Static

static

10

571b5ca520...fa.exe

windows7-x64

9

571b5ca520...fa.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    571b5ca5201ae8f5da05c344ba604739785670db49b8a3376469379e345833fa.exe.compressed

  • Size

    160KB

  • MD5

    a31266e3dcef4b08f11b1d5145340725

  • SHA1

    6cf905e152160fdf7781f98a868b756eb8833053

  • SHA256

    be10f91c98743b1e12942a5f723d5d0ac074243efd4fefb6c74647c7ace65774

  • SHA512

    dd6aa24f93aea731cc3f4adbc3469e4027577072b8bd211941a8f82dcd1f559afde6cc9aa0056c1ea560fe236ddab68ea2e42e749fee618f2f45bc51d93a840b

  • SSDEEP

    3072:YFB3O3IRORghwODMJlz1dxoOXwupfowIFIKmk/w3JgBhqkLZiufFCj:GBZcIDqvysbpflVKB3qK+

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 571b5ca5201ae8f5da05c344ba604739785670db49b8a3376469379e345833fa.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections