General

  • Target

    DisableRegistryTools.exe

  • Size

    17KB

  • MD5

    f4026e82f1034783ad20e35811179367

  • SHA1

    aa9554c21854202a696708c6b3977787bdb88a8a

  • SHA256

    945b638e7180ce27e20932feea01675de72b570fc41c336f2637e74f0e38ce1c

  • SHA512

    3f99556065506887ca692a97daebdb2daabd46e6ab4b45dba17042ac5459ee26f88b18c74ac6a160fb5f5c471464b92e7cc96004374195b4451e032ae98b8732

  • SSDEEP

    384:e8Dr+sQ8zL+/JRrhr/y8vtbNAF4cHjmqLCJPEfhSvLTLKLFwZIzKM:ppmJdJy8vNQ/iqGJPEfhSvLTLKLFwZIZ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • DisableRegistryTools.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections