General

  • Target

    PO37489837645 COPY.exe

  • Size

    917KB

  • MD5

    3f9941abefb26ada7f1b3dcfb564a31f

  • SHA1

    b520697f0015757012c3fdfa7973bb502143a936

  • SHA256

    e17de40b62d3499ac85fc6815cc9933ec9bed7b1970458fe13b0f11cdec5140e

  • SHA512

    81b9e7fcb688690953dbbf0a561515d359ed0b6325b43a87fdf59c38efd50a23894baa023c14e60e861d468b1c80937542742db20756387b8594246cd112a7ff

  • SSDEEP

    24576:fBXu9HGaVHnBi5qAs2LsFcE/ONvlGqpWXv3:fw9VH5As2Y25Aqs/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • PO37489837645 COPY.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections