General

  • Target

    BHNKl.zip

  • Size

    1.3MB

  • MD5

    a810d763d2e43f483b66c0a0f2f11916

  • SHA1

    e607ba502ea33c3c819232c12da321db23420340

  • SHA256

    af7eb8a4417cdff00e9fd4158a78377748e83d3d2764287324c7a57495151148

  • SHA512

    e0881631b3b95adc3b4542589e192f739812ca5a35106380d7034388b843ae04642c52fd3bd3f80fa264aa88591aa91185f0c0ad3475bc73f95d8d6760896ddb

  • SSDEEP

    24576:F3xMQpTdYS/OWtorq/1REDUktj2dTq0DcLCxMQpTdYS/OWtorq/1RE:F3xTTWeQUMyZrDcLCxTTWeE

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • BHNKl.zip
    .zip
  • BHNKl/X7QJMe.dat
    .zip
  • BHNKl/X7QJMe.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • BHNKl/n0F.dat
    .zip
  • BHNKl/n0F.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • BHNKl/setp.log
  • BHNKl/setp.txt