General
-
Target
143b9e32f048d92ac60cf00f18ede0b49d59dae3e0d98f0e02421d5e0a92e5e1
-
Size
99KB
-
MD5
957889d89435cc4227ebd7990b01648d
-
SHA1
2d70ce2113aeacdd9932543b5591f0aeba663b89
-
SHA256
143b9e32f048d92ac60cf00f18ede0b49d59dae3e0d98f0e02421d5e0a92e5e1
-
SHA512
c6eac981ac6a1ef946a69b979dd028e58c6fde24eb889ef657bb4fdb67a242e6250bc95c129e43b06f5fe09b96057cc6fec4c8ac24b1cb727548e39edbf1a4f5
-
SSDEEP
1536:BIj4uMAim2szHhIv49A08qIPPgBvlmYkw7OOlhIWGYkb+EC3LZ9m7nDofS9Z1Gn:QPvimVzHCfqL1l57hsvYkyEooDgS
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
143b9e32f048d92ac60cf00f18ede0b49d59dae3e0d98f0e02421d5e0a92e5e1
Headers
Sections
-
out.upx
Headers
Sections