General
-
Target
1652ff23cf32a7e2ae6db5e106ade1a04342854758eb3585284ae79c3fc1818a
-
Size
99KB
-
MD5
e74d2185af12eea2ab20e9bc78cb35ce
-
SHA1
8ec7f920976478a7acc36212b23581c7df0fc42a
-
SHA256
42d2e3fa1d4cc6edb0ef0390d20c955bc5b1141a517cd9b67b3d4ea7ed7495a1
-
SHA512
acb5c81763c4ddc407ac4444507f9d890ea205c0fc80bc230e465fe7c905dca25a2ab346b91e143aaf648c4549da3e792caedf2737bd0c419473b92dfac94df4
-
SSDEEP
3072:VgataohgelT+4x6oyZ8f85Uc+CfAuC5Es71lhF:uhR8hfM086y+Es7
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
1652ff23cf32a7e2ae6db5e106ade1a04342854758eb3585284ae79c3fc1818a
Headers
Sections
-
out.upx
Headers
Sections