General
-
Target
4ddf66ff9dae2f2c39789b94253e7c74601cb7e883b1653d1f83841cdc30f4f7
-
Size
99KB
-
MD5
03d0619850e6a7bd3b7e8194ad09d3d9
-
SHA1
ebf991018bdaf17bc9d67b2f1d6c6d65c9188fe5
-
SHA256
4ddf66ff9dae2f2c39789b94253e7c74601cb7e883b1653d1f83841cdc30f4f7
-
SHA512
772f7b1ca903c22030db7459b78b66fc70110d89c23ccd30d682bff9cfbd31cc082c47e775e7c95890c6b8aeee005d93ed4eb8483a3cbcb4921acb028a6c1e75
-
SSDEEP
1536:XIj4qXt3uNIqQTZzhWayYqAfJVDWXjD324oC3YMYaPmw9C+dLrN98n:2Pt3u5sfJVW3263YJc7Lr
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
4ddf66ff9dae2f2c39789b94253e7c74601cb7e883b1653d1f83841cdc30f4f7
Headers
Sections
-
out.upx
Headers
Sections