General
-
Target
f2fc82051246e644571ba63e6a54bdc6902fde91f5e0f67010916a844b55d59d
-
Size
99KB
-
MD5
967e0fb936012119d3354c483797e440
-
SHA1
255190e344c20ad1f67580516fcc26a73ef4342e
-
SHA256
f0ec53167dd25b7a364858943f09f4ef706fc2dc80b577489609280bc0de1bf6
-
SHA512
3bc731747fe02a48cdc65cefa7b4107eb12d924b1779e729df2f9d4ebda2f5aa8b74d6c80686f7e90681aea2f523c0ce6a4c40fb1fe13480dd7b1da4adb65fe7
-
SSDEEP
1536:RIj4NyUN3HZUR5WnPszr0MBEJVLcZL82ZTBv2caHwaCB284O+6n:gfUJHZU5WPLMBEJlcGE7aHwa
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
f2fc82051246e644571ba63e6a54bdc6902fde91f5e0f67010916a844b55d59d
Headers
Sections
-
out.upx
Headers
Sections