General

  • Target

    1aa81f2c899008b1f482206e0a73588f63c16c17c829169ed34ab2553e6232e8

  • Size

    247KB

  • MD5

    6bc8b8ea22ded629343c7cd37d165b69

  • SHA1

    ac644dbe00940622e829eea2c7ff98ddde7f2979

  • SHA256

    1aa81f2c899008b1f482206e0a73588f63c16c17c829169ed34ab2553e6232e8

  • SHA512

    9335907ea8c7b3190adb4368238eb47b05eb279f7dc0195de681d3b33b2758377b7ef657de0d094e75606a49e97129780f6a108c68e586a4b1882c008268cc5b

  • SSDEEP

    3072:YYB4Qlayj4kOLH7yUzOu376z6zODggW9VzzOninjdJpHk:5yQlayj4vLmar6zFVWjzzPRJpHk

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • Urelas family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1aa81f2c899008b1f482206e0a73588f63c16c17c829169ed34ab2553e6232e8
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections