General

  • Target

    81c445721349cb2d9cd95f2870f7129e2473f14efea66ce10577e8a782ae6463.exe.compressed

  • Size

    160KB

  • MD5

    e856a58781ed82dc00876700a85c6fa0

  • SHA1

    ea7fe02f71911eb915e543d3eae3d4859033f634

  • SHA256

    f4a2524230e4ade062c8145f2c38abb62ab575b477e65bf8903cd9eb19aac535

  • SHA512

    b173cd4ba40fafc57fa5795135a4be11029ac9f720dce8a0f0725c36e242ed87f1c5ce3755b3effe25595dde3efb41c1d4df97a468e2570fa222b51a3a070a70

  • SSDEEP

    3072:KFB3O3IRORghwODMJlz1dxoOXwupfgmt/EI7+PyhH/afPuoSZrGEA64:cBZcIDqvysbpfZ6IaPPaw

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 81c445721349cb2d9cd95f2870f7129e2473f14efea66ce10577e8a782ae6463.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections