General

  • Target

    0dd7ef3d679f115cc5be5dbc2e22e925a6f8c87f538757b91ccbb823c7a524da

  • Size

    160KB

  • MD5

    6ead2b7e6cdc9d8fa1597388247e70b7

  • SHA1

    5600b82045b5e7258e8103e093a6f4b59e5c9689

  • SHA256

    0dd7ef3d679f115cc5be5dbc2e22e925a6f8c87f538757b91ccbb823c7a524da

  • SHA512

    3c20a68879983429d57db0470c4ef633e0e556651d20af5d510248c392f620a862d475ef629a767bf374be701231368f208996e14c210e931a5e4a51ea4fe66f

  • SSDEEP

    3072:2FB3O3IRORghwODMJlz1dxoOXwupf2wIFIKmk/w3JgBhqkLZiufFCL:YBZcIDqvysbpfvVKB3qK+

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dd7ef3d679f115cc5be5dbc2e22e925a6f8c87f538757b91ccbb823c7a524da
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections