General

  • Target

    edce264d0c6cf4f7cf4c26adce00ff0bb770dc92fe39876dc63395505261c024.exe.compressed

  • Size

    160KB

  • MD5

    566729744c55d7ab7a1d8d55d5ac0b1d

  • SHA1

    d41370083a8ef4761028ea449ea123977a412cde

  • SHA256

    7fa988b6871240c95f283d6725604d83bb59962adcf77dc139b1be71cca25017

  • SHA512

    0783f4409785a20096cd2970a0f92bbb4da154963bc2c1c9b0c5a5124bc57f355359df3ca8bfbb6caac3a03edfe8288940bb82072160105ea99a8606af184d67

  • SSDEEP

    3072:5FB3O3IRORghwODMJlz1dxoOXwupf0wIFIKmk/w3JgBhqkLZiufFCL:LBZcIDqvysbpfxVKB3qK+

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • edce264d0c6cf4f7cf4c26adce00ff0bb770dc92fe39876dc63395505261c024.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections