General

  • Target

    42091cb5ebb4004a40449aebb4509b5d6493216fcd9f1ef7fa0d0ae283b5c928

  • Size

    160KB

  • MD5

    43bf8fe562eb108303e8795d5728404e

  • SHA1

    3dbd4dcaedbc2ca86e507866362f3f0b4ca080fe

  • SHA256

    42091cb5ebb4004a40449aebb4509b5d6493216fcd9f1ef7fa0d0ae283b5c928

  • SHA512

    61192977a5ef29836f411b49816cdd3646fd5220802a223d45d0e563c0ab2f51dd4a884e67addb7258dd6ab635d90a40eaf5404831247beff595096c183a63a4

  • SSDEEP

    3072:MFB3O3IRORghwODMJlz1dxoOXwupfUmt/EI7+Pyha/afPuoSZrGEA6k:aBZcIDqvysbpf16IaPuas

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 42091cb5ebb4004a40449aebb4509b5d6493216fcd9f1ef7fa0d0ae283b5c928
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections