General

  • Target

    ed969fbbc8e0482e0a186eef5d911740f74dd25a791634217ca730938414ec84

  • Size

    364KB

  • MD5

    44d019b3b907424bf254340d875b1841

  • SHA1

    c2d0c32b65b8e6369e4c8e95cf33fe0211e9d99e

  • SHA256

    ed969fbbc8e0482e0a186eef5d911740f74dd25a791634217ca730938414ec84

  • SHA512

    e3e54cd1c26fccfcdfca37bdbe5b44fdbeaca6bf2f2ddff0e9d16ebdbd4e70c59b433e9a7391cb4634296327487d5850685e2f6bb4abad7642e8e31300d43536

  • SSDEEP

    1536:+MFUzXF8CvrJ4PBhDP35S6hMblProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:uh8k6DP3w6hOltOrWKDBr+yJb

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ed969fbbc8e0482e0a186eef5d911740f74dd25a791634217ca730938414ec84
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections