General
-
Target
39058d047e2d46875ae7695121a38758ae657b6628de2c15308f52fac0f28293
-
Size
99KB
-
MD5
f3a7313745e42da3533113eddacfc93a
-
SHA1
f707383f59814b2674ab37f9cbe7277b4f9cd88b
-
SHA256
39058d047e2d46875ae7695121a38758ae657b6628de2c15308f52fac0f28293
-
SHA512
bbbc4f60bef446dc39d99a4c6a44c3c21aba918aba2166083c1353cd40653b6520a6a30a7fe8b8b252bf13aaa10b1aa274d67a2d8baedd304d4a933f36643ed1
-
SSDEEP
1536:+Ij4BsNwRQM0nAK/ZEm4trpY0F88iEnpkhj6mgLa8ae1gDkL8Vfn88Sn:jcsJMsxEppHkhu/aeYsmh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
39058d047e2d46875ae7695121a38758ae657b6628de2c15308f52fac0f28293
Headers
Sections
-
out.upx
Headers
Sections