General

  • Target

    285c6ea3ab69f40e4f046c00880beecd96576b7555746640e19f7d937617b9c7

  • Size

    163KB

  • MD5

    cbd0f452878af1c605543e3c575144bc

  • SHA1

    69e1c2009688b988fe27d4e72bb3500d020cf7a5

  • SHA256

    285c6ea3ab69f40e4f046c00880beecd96576b7555746640e19f7d937617b9c7

  • SHA512

    de593c333425e82288c33d4e36e6415183eabab46d5672017d4bd513dcfec5a5dbd5ba01c1cadb2ee10b40675f395e16a66ce7e26be74e01b57f1805aad605dd

  • SSDEEP

    1536:P6yugCJZBLaz+p/B0i1l+XFbEeeheeeeeeeeeeeeeeex9B9GeeeeeeeeNeeeeeeY:i35JXlX0bc+w7LltOrWKDBr+yJb

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 285c6ea3ab69f40e4f046c00880beecd96576b7555746640e19f7d937617b9c7
    .exe windows:1 windows x86 arch:x86

    c2a87fabf96470db507b2e6b43bd92eb


    Headers

    Imports

    Sections