General

  • Target

    01295c7946e632fcd1dfad7236dc69c3e1451b806b3296ac35b56c30596b78ab

  • Size

    160KB

  • MD5

    e3d57135d9f1f2be808d795670966949

  • SHA1

    bbac6ea24e4acc873439955c67bbef846101f17b

  • SHA256

    01295c7946e632fcd1dfad7236dc69c3e1451b806b3296ac35b56c30596b78ab

  • SHA512

    9b503f265347e80c86f50167234083ba23e346e8a415a468492942609186a31b87dd119ecee2f8227c93408917c780501511e3151ead27071daa2fb1c01e0471

  • SSDEEP

    3072:EFB3O3IRORghwODMJlz1dxoOXwupfH6FivjGdlEeeE6B17Fh8Esp9J5LOUN1X:CBZcIDqvysbpfEMjGdNSFnspN1X

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01295c7946e632fcd1dfad7236dc69c3e1451b806b3296ac35b56c30596b78ab
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections