General

  • Target

    0cd6c1cdc3fe6e42db28ca108d3ac0766aca61e08588b57f6e481dff43dd3da2

  • Size

    160KB

  • MD5

    83c955340a2288a671fafc156302b3fa

  • SHA1

    5f9eb8a1db816e34cd1e2391922987bfe3ec4978

  • SHA256

    0cd6c1cdc3fe6e42db28ca108d3ac0766aca61e08588b57f6e481dff43dd3da2

  • SHA512

    a4c87aa38952a6155bc8cd28a8d9100921e01200af5d7769f1b970ecfe050e3565c0653d78c3767391e9b716b63199d06adb44371441aad0c064b9bad25933e2

  • SSDEEP

    3072:HFB3O3IRORghwODMJlz1dxoOXwupf0zVyAuOW4BjzuThJagjKAB4J:lBZcIDqvysbpfyGlisagjK7

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cd6c1cdc3fe6e42db28ca108d3ac0766aca61e08588b57f6e481dff43dd3da2
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections