General

  • Target

    035c8f508ce081ca9a21c3c46925d02b1f34563e9084fa722993ffb6f5603e1b

  • Size

    2.1MB

  • MD5

    57eff61a980288470c48c7802572135e

  • SHA1

    7d373e5683826fb0fc17b58f693f37b9ee1812e5

  • SHA256

    035c8f508ce081ca9a21c3c46925d02b1f34563e9084fa722993ffb6f5603e1b

  • SHA512

    e6b7b07fea98807923d77e141faa838d7f518648a84944ba1d90a6c086b52920a499d46c4775de19d2b0693083764d3aae538ce4dcbc660669e93c0919b5bb69

  • SSDEEP

    49152:LEn3B/DXuukP2fu5cje0Yj3y7LPQf8fIlXzANYu1Taxg8/KClA4:Mzi+fuqje5j3EkfzzANYAG+8/Kh4

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 035c8f508ce081ca9a21c3c46925d02b1f34563e9084fa722993ffb6f5603e1b
    .exe windows:4 windows x86 arch:x86

    187b3ae62ff818788b8c779ef7bc3d1c


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8e4c63f70f7cc6490634d743e795c93e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/BroomSetup.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $TEMP/file.txt
  • $TEMP/syncUpd.exe
    .exe windows:5 windows x86 arch:x86

    ed8882699e65a1c1d251d302b30ea785


    Headers

    Imports

    Sections