General

  • Target

    59294aa652ff252c5c62dec171bd58d30ca0c37361171a2c9882d109a2e6b2fc.exe.compressed

  • Size

    160KB

  • MD5

    ba159ca1e6fcd35796a243ac735ac716

  • SHA1

    252a5aed7f028a7e23de2fefdb6c663b9a228fb6

  • SHA256

    5799f48a39aa7b7cdb0e38689aea32c821baf2ffef7e143f3f76034e2507e8c6

  • SHA512

    e951f71146adaca48bbf6cd46f66f5cc5dd05cd17431de65eb6488f72f9a8c2d273f7d9406adf42a51b254e5bc86523200fad3975c0c507170db7da7dfc288b6

  • SSDEEP

    3072:XFB3O3IRORghwODMJlz1dxoOXwupfCSHJGW9nHIBwX6bTYcwtv:VBZcIDqvysbpf/H9AkOov

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 59294aa652ff252c5c62dec171bd58d30ca0c37361171a2c9882d109a2e6b2fc.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections