General

  • Target

    e1593dd6e5ab80b64e55c4e2a2c11882

  • Size

    1.1MB

  • MD5

    e1593dd6e5ab80b64e55c4e2a2c11882

  • SHA1

    60834ac0bacad9f26ecec51eeaabff288380c9b5

  • SHA256

    0bcb3f8310fa777796da9bf501dbca4f64a183a6ec4066b9b164f09e8c8c2838

  • SHA512

    32563611ebd4376676d2649af36de1a9110b0b4de79107dda0aebeb7a19e5038d890e72c25728b81ee4328d4b2845f261da886a7334b35576eb6673d4a2453b7

  • SSDEEP

    24576:4FgiqRTJwr3rVrthcIF4gN8BoYU/qPYWSAClr:w/vzhcI96tPYWcN

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • e1593dd6e5ab80b64e55c4e2a2c11882
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Banner.dll
    .dll windows:4 windows x86 arch:x86

    7a3709b093081d5614be1eaa2fe7fe76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • DomaIQ.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • DomaIQ10.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • OfferBrokerage_14003.exe
    .exe windows:5 windows x86 arch:x86

    d9c3413ea92b566a4fc5ef407b8d3284


    Code Sign

    Headers

    Imports

    Sections

  • config.dll
  • routes.dll
  • setup__120.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections