General

  • Target

    c3ad536c62c2822d985484042857058a

  • Size

    3.9MB

  • MD5

    c3ad536c62c2822d985484042857058a

  • SHA1

    1024f8bee84745d004b3a3605ad780d64f8f9624

  • SHA256

    8cc69c4b900866197ffcd615fd3f0bb1adc5f280c37d92413a2a36d8aeddfcd6

  • SHA512

    6cd5dcc1453281b1c07a6eabd5521713ece3ca72671f6d9f8c8023af6d8ef5e8aa1e2a1f8242c2ea144c4a652c33d6994986e33be25f779c47d9f2ae04a6bbfb

  • SSDEEP

    98304:F8ulYRytIiM5Y2VKGQBCj/yaFK5sq100n1s7qKJSzCxqFx2rw5iK+H+:F8uyRyQ5VV1QBy/yaE53C0nq7qlz+qFV

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • c3ad536c62c2822d985484042857058a
    .zip
  • GTrade.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ext/php_mysql.dll
    .dll windows:5 windows x86 arch:x86

    54570c2992a0fe32161240bf20b59a21


    Headers

    Imports

    Exports

    Sections

  • php5ts.dll
    .dll windows:5 windows x86 arch:x86

    aaf1492926158df000e59c70092d88e8


    Headers

    Imports

    Exports

    Sections