General

  • Target

    013ef69d0e054d0af2ed1928cfdc50d72b003f7d4797754495554dba38ab5918.exe.compressed

  • Size

    160KB

  • MD5

    79f7a7eeed74cb1cba649983b50d9f19

  • SHA1

    6fdf4f6e9fe91ff4dff2c896dc34b7bd956da401

  • SHA256

    4a7f3c36c1acfca52bed6df36b0ab21f49df09b6120146ce0084ec09531b26e7

  • SHA512

    412eba377673a30cd24f8970c1d41d6d5ce7a3cf0c95b1003df55caef624b5d9c6381f126c95860b2f2f399cd42eac77294faa74b018c6874a9f19f0c5dd4380

  • SSDEEP

    3072:iFB3O3IRORghwODMJlz1dxoOXwupfbIf9Woeke2XLslpsLaQucC94zia7:EBZcIDqvysbpfb4WoBNLKsLa5u1

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 013ef69d0e054d0af2ed1928cfdc50d72b003f7d4797754495554dba38ab5918.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections