HEUR-Trojan[.]Win32[.]Bublik[.]gen-c7951ab7e58ce4e0c31636a43d2ef7fdbb167de4b1e0eb36477579f28024511a

General

Target

HEUR-Trojan.Win32.Bublik.gen-c7951ab7e58ce4e0c31636a43d2ef7fdbb167de4b1e0eb36477579f28024511a
Size

30KB
MD5

e5444eec74e8616f40814c6f1f0f522c
SHA1

355797c2fccbf293ee9acb336df9051a2db1ccda
SHA256

c7951ab7e58ce4e0c31636a43d2ef7fdbb167de4b1e0eb36477579f28024511a
SHA512

e1cf2e0001f56d93bb253d235886085f091c6b6ae9fbebb678bce18c34680866be3fddebe0d01e30c04db4f82927f0772396fbdefc775e729ab1d91e2dca386b
SSDEEP

384:W6C5SYpuESCgvATWe64tWsZxyQgcvsBsBOnp2HrfH3Xzxut/b6s:W6n0Sa+6PhxsMOn0HLy6s

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Bublik.gen-c7951ab7e58ce4e0c31636a43d2ef7fdbb167de4b1e0eb36477579f28024511a