General

  • Target

    4d838a361c37d959b931402d6f836c70b2b4f3adf9b1f87154824388b658fb7c

  • Size

    364KB

  • MD5

    57bf447192983803f9b1c545361fc1b4

  • SHA1

    5417699e55cd5e7840aee807a9a2cf64db16e60b

  • SHA256

    4d838a361c37d959b931402d6f836c70b2b4f3adf9b1f87154824388b658fb7c

  • SHA512

    02318bad739db73e5cf9e4e933c5ec7a62da89380173f01cc5a4ccf8b763bdae9ebf0cdd65ca871ad06dc17c064286e7f85f7ce8553dbd2ce4560deabc0d0308

  • SSDEEP

    1536:Eo2gzXF8CvrJ4PBhDP35E6hI7lProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:d2gh8k6DP3y6hCltOrWKDBr+yJb

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d838a361c37d959b931402d6f836c70b2b4f3adf9b1f87154824388b658fb7c
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections