General

  • Target

    HMZLEP.exe

  • Size

    1.3MB

  • MD5

    90bd60018898cfa0996e4ab4d53e3443

  • SHA1

    5e2389308534903b7a399765268ee75fa1ee258e

  • SHA256

    8c3e623134705c79cd342a51b89016f96cea3e2d9f2c36dfe38351d123a42e7b

  • SHA512

    c76c7d7a5738d3d2fede883e2a67643c007f6dbaf4ada7a27748d46ebf19a5468661d7df447349f4790e719dfd92ad4a1e21341ff693f8164411618f81f60561

  • SSDEEP

    24576:ethEVaPqLqjuTGczYcXga6C7WrmjSD2IrKFhoV7N:mEVUcqjuTGczjSA2DVrKURN

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HMZLEP.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections