General
-
Target
05fd1ef7a6693e0ef615b6fa4a42abeb6d7557af0e0420c13a9b2f6687f326b2
-
Size
99KB
-
MD5
818517529f4a81cbccfffd7d8f5094b0
-
SHA1
300b406ea200412f0065890bf82b8a979ee39431
-
SHA256
05fd1ef7a6693e0ef615b6fa4a42abeb6d7557af0e0420c13a9b2f6687f326b2
-
SHA512
099a1c1b7d96144000ca507c8d21d9286d512dd22b8e3a876fba070771305da1985c90ee2e40ff15830630f0e922d8fe3ec8255a08605b2c181d4e1d8b8c518e
-
SSDEEP
1536:AIj4Ecw4DZkPlzf2eIKIOLLzELlH5YjeV/YsVXTwdXMRl/D2wZi+N9rz+GwEn:15HGZqlzMg/EJRVQsNL/vZBjTw
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
05fd1ef7a6693e0ef615b6fa4a42abeb6d7557af0e0420c13a9b2f6687f326b2
Headers
Sections
-
out.upx
Headers
Sections