General

  • Target

    Email-Worm.Win32.Nevereg-289762c7ab11bc573f4246007eb05ea2384b3e4a5e3171bff1a044e9bbc0553d

  • Size

    29KB

  • MD5

    2bbf88bef26ee9d4fac3549c5103176d

  • SHA1

    cb2b5d099844bebca3b3830304637d60c91f8f74

  • SHA256

    289762c7ab11bc573f4246007eb05ea2384b3e4a5e3171bff1a044e9bbc0553d

  • SHA512

    20e00cf5ab8abc3d7109a852ab72a700d00c696bae561661432303b482596dbedd3f5f82341059d2d879956eb4af2992069df38e847f658395c9b35764cf50d0

  • SSDEEP

    768:ITRfpN0pOy3OzeXmOGXbJOlB2vsLCik5dAy7b6lS7fjn:IHzzeWHXbJGB2EOik5h36lYjn

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Email-Worm.Win32.Nevereg-289762c7ab11bc573f4246007eb05ea2384b3e4a5e3171bff1a044e9bbc0553d
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections