General

  • Target

    1fa13f4642784069890af9e962b2ddb238d7f7f54055578637e98bc93fa28946

  • Size

    364KB

  • MD5

    7bbefbc28e1e64c37b562dba30556be3

  • SHA1

    597d7f249251b765f895a1a6c93ad18cf214a1a3

  • SHA256

    1fa13f4642784069890af9e962b2ddb238d7f7f54055578637e98bc93fa28946

  • SHA512

    c4abf107474adfb1100c737439c52e3850a8a83f1c52ec64dbfc8069b1d7f19ea8aa9e6f95a63894451ca98a35feb388b50b7037990c46ae04733e6376ffec53

  • SSDEEP

    1536:aMhlzXF8CvrJ4PBhDP35r6hkelProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:aOlh8k6DP3t6hzltOrWKDBr+yJb

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fa13f4642784069890af9e962b2ddb238d7f7f54055578637e98bc93fa28946
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections