General

  • Target

    af4de792c0da34dd71789d30274896d9014ce6b61f841a86ccae26a9748b4fea.zip

  • Size

    749KB

  • MD5

    49c937aadf31a48992f80f75fd58b549

  • SHA1

    1037cee424bf4793750a2bc34fd8e84053d18a26

  • SHA256

    78a15eacfd144a1375067e64039907e25e29513da8b32994654e8d9e6cea954b

  • SHA512

    d3f15f06ce01143236869dd9b2a7c5f18c80a4f11cfb8a673ee8b57906d02a6dcc0923451ca6e4784296f405228dbf646d9abf90fce7c27714f126e557c2f60c

  • SSDEEP

    12288:+d4bSUF/axs2v+QYQQ8NA6Sh9yTnVQZ3bxrDR8sHC72PxFVLtHUokQRY6PaiIJXD:+drxs7lQb6rOnK3bZd5Fv9RY3iIJX1FX

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • af4de792c0da34dd71789d30274896d9014ce6b61f841a86ccae26a9748b4fea.zip
    .zip

    Password: S1BinaryVault

  • C/ProgramData/Sentinel/AFUCache/af4de792c0da34dd71789d30274896d9014ce6b61f841a86ccae26a9748b4fea
    .exe windows:4 windows x86 arch:x86

    Password: S1BinaryVault


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • manifest.json