General

  • Target

    00afe906074bb16691923696852dde270cd0e0a8bb1eb4c14fece370c08d7b10.exe.compressed

  • Size

    160KB

  • MD5

    aa1676536151d834a060eb55648f80fd

  • SHA1

    460f9d4ab8ecfd6dabae768ea1096f36b8ca2a87

  • SHA256

    9d7f3fe215a68ae0e71d585a0453772aa093fa827c959e6dbc5125488ae58963

  • SHA512

    f3d2791700c840ee7225ff9d02622b072375be405510a78dd103a1ab04c8fac69fe875032c7845910e4a84d35f21130c71c9c7faffcae61ed7b94bb0a294c689

  • SSDEEP

    3072:YFB3O3IRORghwODMJlz1dxoOXwupfWwIFIKmk/w3JgBhqkLZiufFCx:GBZcIDqvysbpfPVKB3qKu

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00afe906074bb16691923696852dde270cd0e0a8bb1eb4c14fece370c08d7b10.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections