General

  • Target

    ffab6e0eabee578d2912a75f5a16da82a1b9ef0f7259c652284767d5b8b6c149

  • Size

    415KB

  • MD5

    91160e42bf2f2892d5c7c8c8ed102197

  • SHA1

    bee037838fb3ad801d8eb494053e2e36c80006df

  • SHA256

    ffab6e0eabee578d2912a75f5a16da82a1b9ef0f7259c652284767d5b8b6c149

  • SHA512

    8d4561841bb41a7ef53d445eef96f1b573d88de2a67c0f3c39c02079200ba65c1d3c0443d3a9af0537cc8ea58e3acd7efdbfc36a5a6783f1972b14b85e54c132

  • SSDEEP

    3072:IgV7qqpVXXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTB891gq:J1XlKgzelZNQSBQGH/CSpWqTVmQvmQ

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ffab6e0eabee578d2912a75f5a16da82a1b9ef0f7259c652284767d5b8b6c149
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections