General

  • Target

    a88df0e1f4d1a9b42e1f85fac19127fa9507645ed1cf02f0781aa0ee08f7e390

  • Size

    163KB

  • MD5

    6f111700e4da6c58a5ef52b0b2cc2da1

  • SHA1

    86cd45ac994a3af89ba811d7169f9cbc989e91fb

  • SHA256

    a88df0e1f4d1a9b42e1f85fac19127fa9507645ed1cf02f0781aa0ee08f7e390

  • SHA512

    2c03dac8ea30598b979602d8d359eca00d53b65cca2da677fe01275ee2dadfee0a341c649435000ce30b1ad2f3c6c164737c242c5a84bb45f305fd82573c2b65

  • SSDEEP

    1536:PJw2ZnGDINVg4YyriinmrjJ2e2Q67ZxBHT9p++elProNVU4qNVUrk/9QbfBr+7Gh:fnGDINbmHJ2fHT/+PltOrWKDBr+yJb

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a88df0e1f4d1a9b42e1f85fac19127fa9507645ed1cf02f0781aa0ee08f7e390
    .exe windows:1 windows x86 arch:x86

    c2a87fabf96470db507b2e6b43bd92eb


    Headers

    Imports

    Sections