General

  • Target

    a362398f3abd81e76750a99ec0512df388d8409118d59e536eff9f503d5323a2

  • Size

    148KB

  • MD5

    19dcb38ae96699d5cdec7e6a25f8fa68

  • SHA1

    7884935873ac65465e415cba54b1c772c6583fb3

  • SHA256

    a362398f3abd81e76750a99ec0512df388d8409118d59e536eff9f503d5323a2

  • SHA512

    ee5bfae45b320197f24fbbf23a8a0212e16847519e0fe6725f309566324de04d414841ba0fd19e5c1b4b40afc22d6df4e5f79e669ed3adc665a11e83cef52db5

  • SSDEEP

    3072:uKjntrgpq7EB8Plv02Ms8Zy4ZSptu8gJq3L1iEfVfX:uKjt1jc2MpR8Kq7YE1

Score
10/10
upx

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 2 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a362398f3abd81e76750a99ec0512df388d8409118d59e536eff9f503d5323a2
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections