General

  • Target

    bdcfd0dbc01149182020cda764b207d9

  • Size

    17KB

  • MD5

    bdcfd0dbc01149182020cda764b207d9

  • SHA1

    1adc74a625d49f55160c2f652aa5c8eec5df2468

  • SHA256

    e1bf85011b61d2d16fe1f4dd055050064d65a330cc199361531ec37a4ced765a

  • SHA512

    d5edce3618e616cd5717d0c37d525b3faa2ab04c4c769aeb52b290aad4b43aec27862af0c5785015a77535bdadfb529929330df55c841606755dc2d308564830

  • SSDEEP

    384:iXWqv2gjDIwGiCqUOHJ52DDlhClr0LHhTvGumzzO3Curlv0pukeS:iXhle4UhKrgTOuTCu0reS

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bdcfd0dbc01149182020cda764b207d9
    .eml
    • http://odnoklassniki.km.ru

  • RemoveWGA_1.2.rar
    .rar
  • RemoveWGA.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • email-plain-1.txt