General

  • Target

    4dd6436209bb628a6d27e31babe8cde5fa4b4a73176ade60a460d64dd37493e7

  • Size

    459KB

  • MD5

    63b99e34d90fc9c89e2c6aabe489af1d

  • SHA1

    a85ab173a0541c8581ae9e953f88814e921679a8

  • SHA256

    4dd6436209bb628a6d27e31babe8cde5fa4b4a73176ade60a460d64dd37493e7

  • SHA512

    a40cf08cc633aa65d728d6a55638f222fd17148ebc7f40cc6a64e542b2067a68678c661d8322b3e0f0ff865b24af1a91c701d376068e6f985cdf2c8eca51e884

  • SSDEEP

    6144:4Y+32WWluqvHpVmXWEjFJRWci+WUd20rUU5EYCTvaBju4zO:LnWwvHpVmXpjJIUd2cUusvalxzO

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4dd6436209bb628a6d27e31babe8cde5fa4b4a73176ade60a460d64dd37493e7
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections