General

  • Target

    28bf1c04559dd661e113e6a7604dbc02c8fc779b0c1c99698cb24a42a390564a

  • Size

    472KB

  • MD5

    c277143d5bc444d8c1054911f95dcd6d

  • SHA1

    814b65fe89ed30d23d81a1ae48384a0786af15b8

  • SHA256

    28bf1c04559dd661e113e6a7604dbc02c8fc779b0c1c99698cb24a42a390564a

  • SHA512

    7c5cde4969c033f9ae857da0039c3a93c75e62cd287f551b910cd2454e2f710b986460212a7f5f142e5f6bd53b8f1604677d0770d6781f12b62f7302a3d5695f

  • SSDEEP

    6144:NY+32WWluqvHpVmXWEjFJRWci+WUd20rUU5EYCTvaBju4zk9Od:KnWwvHpVmXpjJIUd2cUusvalxzk9Od

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28bf1c04559dd661e113e6a7604dbc02c8fc779b0c1c99698cb24a42a390564a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections