General

  • Target

    f34cd6a000aa9a4744c54758cfecf85b36ef5ac09f1d4c60d93dc2c0dd61e79e

  • Size

    364KB

  • MD5

    e9d3df3ce8135d4f85f12b5d1825ba13

  • SHA1

    26fdd572e5b61ef9d50d2f5f81a4561dc1b792d9

  • SHA256

    f34cd6a000aa9a4744c54758cfecf85b36ef5ac09f1d4c60d93dc2c0dd61e79e

  • SHA512

    0a927c195114a3ea98e96d0c184fb133f1dafa87f8082def40b61cde7ac76ca48a05e998aa568f2468494932d5b4c4f59581c5d1294502ea3e283678ac66c88a

  • SSDEEP

    1536:BfB4jzXF8CvrJ4PBhDP35u6hflProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:Mjh8k6DP3M6hfltOrWKDBr+yJb

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f34cd6a000aa9a4744c54758cfecf85b36ef5ac09f1d4c60d93dc2c0dd61e79e
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections