General
-
Target
46576d4dd7120d07ed5dc253ac1361f5f76e2e0e7fdf7937348c05c9874f3af3
-
Size
99KB
-
MD5
e9a7e03f57837bd83f1850144468e1b9
-
SHA1
6317e641d8c01f29d047156896fa37752d6f1010
-
SHA256
46576d4dd7120d07ed5dc253ac1361f5f76e2e0e7fdf7937348c05c9874f3af3
-
SHA512
a61e366146d4dfa14cadad692e29d14d3d59efb735ac608682b06469648cd8d29f075b3c63fec1560af2d6641473176f4f78e0d812b10c8a5ca8df100a061631
-
SSDEEP
3072:0wHil4g8mVlwT9+0Eyos1qdHUY1ft0RMA:/CldlG+HlHh0
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
46576d4dd7120d07ed5dc253ac1361f5f76e2e0e7fdf7937348c05c9874f3af3
Headers
Sections
-
out.upx
Headers
Sections