Resubmissions

20-04-2024 14:43

240420-r3mvhsag99 8

20-04-2024 14:30

240420-rt9mxsaf47 8

20-04-2024 14:10

240420-rgzl7aah7x 8

General

  • Target

    server-windows(1).bat

  • Size

    5.1MB

  • MD5

    ffbae840d10586e53018bedb23404fe1

  • SHA1

    c91fec9c39d6f247d88a9deef563c99e38f07357

  • SHA256

    02d6a96b267160fa3a2826fd6068c41c528445bc72e710065e73aa260772852a

  • SHA512

    253f429d040de482a9ff91fa0ba75d90d83e61cd0bdccfb318703c62000598d1e8bd464ace02d884d52d8ac07fa7c9e69377bdc6f14bacdabc9ccf74c936e224

  • SSDEEP

    98304:OQ02BgPYN2mj6E9+Mpk8Kr+SLb3PRV6MpInKtp+QdoJO:OQTgPS2mOEoMKpXdpImpPCO

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • server-windows(1).bat
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections