General

  • Target

    FECWXQ.exe

  • Size

    491KB

  • MD5

    96e4d8e02c5ec01ac83d3d84e5a61e18

  • SHA1

    8a259428650ef3400d6500858970d22b5d69c3ae

  • SHA256

    36d32fbafc5c9974d098c9cc6c1b728b0472318539333d4326362017e02acd2f

  • SHA512

    c3bdf743517a96a748a93a7581266a26545d51006880669bb1fff14d3ff6716e24d05a44fda5e52d91d3b247343755fe7aff1084245edc3535ab090e17f6f855

  • SSDEEP

    12288:I6Wq4aaE6KwyF5L0Y2D1PqLQ7a289KvvYY83ltl9:ethEVaPqLgZgKvvYFp

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • FECWXQ.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections