General

  • Target

    VirusShare-64875cb1b0d3d3bd21815e2fc60d7818

  • Size

    8KB

  • MD5

    64875cb1b0d3d3bd21815e2fc60d7818

  • SHA1

    26063a91318e5ac81f87dc6b79e9fb5bf557d948

  • SHA256

    ccef3b590d0aefb2abfc2f2abfeff20499bcdc905f8a32debad2505e7814d8e4

  • SHA512

    0e0a7743ba4374b002952d3d1e9d23426ee099fe7d57279dcbbd2f597c92fc6fd72bb10a7772130d9e07545168c74c4c42b86f417a4d83ba250ec3a8d93039e6

  • SSDEEP

    96:1Ub4PDbjHVxZlSBW3E4wt6V+XuPbHisMF/XTc0ZfXOX4Ndp76bvJUD3GZtnu9ULt:1/jZls4wgxDHlMF/XA+XNd16KbP9Wz

Score
10/10
upx

Malware Config

Signatures

  • Detects executables embedding registry key / value combination manipulating RDP / Terminal Services 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • VirusShare-64875cb1b0d3d3bd21815e2fc60d7818
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections