General

  • Target

    ad20a9aecf9b0f657a383db42e2d3712618856a93c18fa7557a4339111628a09

  • Size

    364KB

  • MD5

    d2cfc8d2d32f238ad141ed051a56750e

  • SHA1

    9fa6af21005b23d1d529978e2da506c601f8284d

  • SHA256

    ad20a9aecf9b0f657a383db42e2d3712618856a93c18fa7557a4339111628a09

  • SHA512

    8f80f0727e9c07af855cfc3d25d6d57e5f3bd8d42aac519431c9515393901ec3c1fa6851376307250f71178eb12f1f99ab51f4534610ecc7eb086ac1185d1098

  • SSDEEP

    1536:/5zXF8CvrJ4PBhDP3576hnlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:Bh8k6DP3t6hnltOrWKDBr+yJb

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad20a9aecf9b0f657a383db42e2d3712618856a93c18fa7557a4339111628a09
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections