General

  • Target

    f556e3712072cf40bdfbe56f49f01ca6e8e40c583f4d2cbbe9dc0f71db9a8d51

  • Size

    477KB

  • MD5

    3db7377259fc14b9b9a090ee5b5f6935

  • SHA1

    5587be03cdf13e7be0dc92031fa2cffccc0ee102

  • SHA256

    f556e3712072cf40bdfbe56f49f01ca6e8e40c583f4d2cbbe9dc0f71db9a8d51

  • SHA512

    507f339a6cbba33e35ee0894b8aa4c5957d0402e79b4c88287ec59b8aefb20b7ec6ee97aca4606ab2709ac4edd86cfb0452c27742c82b47c4a263068e2c9e343

  • SSDEEP

    12288:o+ILgF8Fii+8MS6oSCzcoMvRNPVO7MgAcRBQ3c:o+ILEXimStQzPPA7MABQM

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • Urelas family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f556e3712072cf40bdfbe56f49f01ca6e8e40c583f4d2cbbe9dc0f71db9a8d51
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections