General

  • Target

    e0bd5e734d64a76e5ff2ea4564db4bd2

  • Size

    2.4MB

  • MD5

    e0bd5e734d64a76e5ff2ea4564db4bd2

  • SHA1

    a0fc24f5f8b16915a91c982ccc86cf3ebd036198

  • SHA256

    59df729485d0ace34ea39a05027dd9cad233452e8fd7b1d1686e192956db0446

  • SHA512

    4d4ca04a39cf1ef21a6dd7b3ff5c434130ecdb58b4eb4aa54975e99db634a9e9072210707e4defd64b7976124afa3a059ff199a3e8d06b6836d5ebf385142cc5

  • SSDEEP

    49152:hDp6+qXmCV1/skBbxx748XKG5CiHWs0jwZHYZgwG5r+K:G+qWgBbD4aF5CMZ4ZgJqK

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • e0bd5e734d64a76e5ff2ea4564db4bd2
    .rar
  • LM9xMe/README.TXT
  • LM9xMe/Setup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • LM9xMe/下载说明.htm
    .html .js polyglot
  • LM9xMe/梁码辅助.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot