General

  • Target

    SRFPUH.exe

  • Size

    491KB

  • MD5

    c1ed10b75f4dcd0ed007044abf7d61a0

  • SHA1

    5d7c52228a37da23482e7d93362a4ab14218cb6a

  • SHA256

    70306db6c59c46de0f849894a9e2a66070d6db978e7185ddb0acdfe58bde2828

  • SHA512

    29d8abd9b012a8f00c300d33b5b939363ff5683193262d5a704e06632a6eacb65e82a471e332205cfef8532ef5a50110e155c0e6c981866f79f19b7d629c0835

  • SSDEEP

    12288:I6Wq4aaE6KwyF5L0Y2D1PqLQpqvAa289KvvYY83ltT:ethEVaPqLYZgKvvYFp

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • SRFPUH.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections