HEUR-Trojan[.]Win32[.]ShipUp[.]gen-9e32d581765919da287a4bb10955a6f9a4f21d5c28c05fdbf1afba0cf501158c

General

Target

HEUR-Trojan.Win32.ShipUp.gen-9e32d581765919da287a4bb10955a6f9a4f21d5c28c05fdbf1afba0cf501158c
Size

152KB
MD5

92808c9dcc9fd730b8623a3c57a4cc61
SHA1

fe2df52d3679666f486af95988c3032135f04b2c
SHA256

9e32d581765919da287a4bb10955a6f9a4f21d5c28c05fdbf1afba0cf501158c
SHA512

d4f5dd26b3bf659423dfc1d63abfa50894f4308648e0cd47735e6e102f59b18c4fcf99204d197c803f82a63b4fb4fb8fec972b8e6da7469637ca8c34af8206c3
SSDEEP

3072:oQzrhhx9yuk/4CrNuXsNTTBm5D5LMXqNRa:o6fPyH7Nu8BT4lMXqja

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.ShipUp.gen-9e32d581765919da287a4bb10955a6f9a4f21d5c28c05fdbf1afba0cf501158c