General

  • Target

    9904208ecb69850bf696a8219c0c142f

  • Size

    1.0MB

  • MD5

    9904208ecb69850bf696a8219c0c142f

  • SHA1

    e498d7ddb1fd77ed219cd6c12b586139d2dcf380

  • SHA256

    6eafb50eddd44360b46f3b69640fbd00c9bfd80f50fd6e255369bc9645e263fd

  • SHA512

    1859438daa9261efceb5ae06e4950039195b4fbe5aae9811674cd57b2ebe2d617881438c7b0ccad17369326b284856a047736ad57866bcb532c6df52f096cb6b

  • SSDEEP

    24576:Us80ZnGden/OItF4BuedIpkZ/CCncV4R8ukUsl4EGlqHzG3BGJxghX6lUGP/9:20pGUn/OItqBueCI8ulz/qTEkxg9UU4V

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9904208ecb69850bf696a8219c0c142f
    .rar
  • worminst.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot