General

  • Target

    6128993f4cce08989e109b36aa3bd6e3566f1ef37a4aab2979660418c83214ed

  • Size

    1.8MB

  • MD5

    37cb388382b9f721319b095bc2194877

  • SHA1

    628f38fd0960ee842f9c8082afb0328716fba7b6

  • SHA256

    6128993f4cce08989e109b36aa3bd6e3566f1ef37a4aab2979660418c83214ed

  • SHA512

    e95deae117a6c603faf7db7a98cf132b0b3f7336a8b8cb3225d83970367ba983b5ab8cab155ed06a0876c2802aa8344dea527c36a581258677bb813759df3b7d

  • SSDEEP

    49152:tIiiK2SpJbGvybisMLAHrNDgVrJB8XZyh:qiiK2M9irSxcFJRh

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 6128993f4cce08989e109b36aa3bd6e3566f1ef37a4aab2979660418c83214ed
    .exe windows:4 windows x86 arch:x86

    187b3ae62ff818788b8c779ef7bc3d1c


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8e4c63f70f7cc6490634d743e795c93e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/BroomSetup.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $TEMP/syncUpd.exe
    .exe windows:5 windows x86 arch:x86

    b019144a5c8fcfa6e09fc1ff7372262e


    Headers

    Imports

    Sections