General

  • Target

    5b13d5b0f0723a5e130bdf262469ec2f4f536e734041586c2d5d114fc40f1678

  • Size

    163KB

  • MD5

    c790e5cf40d019dda1829c1e6dfd2b92

  • SHA1

    7527e32be9ba80a307e53b43407f4a4ae3911c45

  • SHA256

    5b13d5b0f0723a5e130bdf262469ec2f4f536e734041586c2d5d114fc40f1678

  • SHA512

    00e3fc21e80e7e7b9d80b777ce468a6b09d9886d769a8f560d0b05c9ac51c24ffbc29134ba20dec16284e66bac4dec445fc2b89e970d5a3e783d4deca3c92d96

  • SSDEEP

    3072:BwfgwOROini9IqbVXyY2ltOrWKDBr+yJb:B1bROj9hbVXyY2LOf

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b13d5b0f0723a5e130bdf262469ec2f4f536e734041586c2d5d114fc40f1678
    .exe windows:1 windows x86 arch:x86

    c2a87fabf96470db507b2e6b43bd92eb


    Headers

    Imports

    Sections