General

  • Target

    HEUR-Trojan.Win32.Generic-71950a4ed4f48efb56a0ea1d6e5c3b90fa2c91e10af8f8e2f41c9f36b55c04a3

  • Size

    76KB

  • MD5

    75d3b765183b2b3ac1529066a8406b74

  • SHA1

    0e1b3d439045a556017a23916e6a26b707c78f6b

  • SHA256

    71950a4ed4f48efb56a0ea1d6e5c3b90fa2c91e10af8f8e2f41c9f36b55c04a3

  • SHA512

    39756aece3b549dbadfcd8e273d721beb987fc74af73c835c4d94d42dedefb075b5da80e1bf5c7c3a143068c6366d6e1c2b31d0fd05fc842637c1efd7d80bcd5

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zjz7rl:c8y93KQjy7G55riF1cMo035zvl

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan.Win32.Generic-71950a4ed4f48efb56a0ea1d6e5c3b90fa2c91e10af8f8e2f41c9f36b55c04a3
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections