General

  • Target

    f6c6528081bb79b416646e72b3b1e4018ab1d20575d0b2c199e75f7488c3ed28

  • Size

    364KB

  • MD5

    66597a5a6811456605b25dcc49976951

  • SHA1

    371d5ce1bd5c17c2ce1efd522929377093e75b60

  • SHA256

    f6c6528081bb79b416646e72b3b1e4018ab1d20575d0b2c199e75f7488c3ed28

  • SHA512

    369b76511f3a3e8ac402a71c35b0fe926e52959a3847e17d7aee4e604cd512d0083924b73b5dcd9968545096276e230baeab93358481efbe8a169586216a0c1e

  • SSDEEP

    1536:GUpyhzXF8CvrJ4PBhDP35v6hAlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:Dchh8k6DP3h6hAltOrWKDBr+yJb

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f6c6528081bb79b416646e72b3b1e4018ab1d20575d0b2c199e75f7488c3ed28
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections