General

  • Target

    65b76ec0b74e6ebe4bc09a4acecb5caf1280286c7d9cdfab5c0c71a1a5175578.exe.compressed

  • Size

    160KB

  • MD5

    44cda3592e15092bf5e2312f91e231d0

  • SHA1

    5fbf92c3d1f1c69364bf92d5b2e19920bea4b47f

  • SHA256

    80b8c6be07ae05ac08cefbdca242bd4601e3d4e69bba4e81a55ddfd9d4417691

  • SHA512

    d4fceac92d14887cb88238ec8ea239c90a320f12f4391e62d31987901af8bb13017bc091848e7f3c71f308a822dcf7ff42b53f7e47268e47b43164228a0d6349

  • SSDEEP

    3072:DFB3O3IRORghwODMJlz1dxoOXwupf+DsVYihc/FHusWfkFXEybOf:BBZcIDqvysbpf+T0

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 65b76ec0b74e6ebe4bc09a4acecb5caf1280286c7d9cdfab5c0c71a1a5175578.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections