General

  • Target

    b56a2fcb0c7f552ee4bf9849ef42b0e2

  • Size

    1.6MB

  • MD5

    b56a2fcb0c7f552ee4bf9849ef42b0e2

  • SHA1

    64dbe2733503b1d6790e4cc25f5e807c19f5765f

  • SHA256

    fbb0b888f9562a1b3df84d29aa60c80cdad841a002598b9a6988be848865e6e9

  • SHA512

    f80c9d4abac266c05ede69b8c4e5f238cfe9cc3f0ed1b002d903a9d4058613d5e5e0fe5a9b85612d9f82d8c7c1e30e9ffea853a933713a79bf041314d3e4985c

  • SSDEEP

    49152:v6ZOb1uwtVlrEg4breXawAlOtvHvY21oCpU:v6Ib1TDrEg4bqX3HT2

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • b56a2fcb0c7f552ee4bf9849ef42b0e2
    .rar
  • ecat_net/clientBeta.rar
    .rar
  • client.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ecat_net/ecat_server_setupBeta.rar
    .rar
  • ecat_server_setup.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ecat_net/新云软件.url
    .url