General

  • Target

    HRRYKB.exe

  • Size

    491KB

  • MD5

    abfaa9e8d7d456611b0fd4eb616ee303

  • SHA1

    1d7f3d678e1e5dc20563da9c8caf0cad882072cf

  • SHA256

    e80f3f419ee70f0716ab7656dc6d1366f0728c5ab8d732f38420158d11710c7f

  • SHA512

    ac9541f263659fe59466a29918a34d5a7f9856ac666b283f826d53b55e5176dfe588ba944274f4502ee275218d8d3ab711bc1baed4e50be5f568d4aa3c84035b

  • SSDEEP

    12288:I6Wq4aaE6KwyF5L0Y2D1PqLQha289KvvYY83lt+:ethEVaPqLSZgKvvYFM

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HRRYKB.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections