General

  • Target

    NTFS格式转换.exe

  • Size

    715KB

  • MD5

    4a156faea816a2c16632a3d9de96be5e

  • SHA1

    07a64b9b6bf1c547041b748d6bfbe90c164d80af

  • SHA256

    e244bdeb33437a8b86900bf1e09dc2b3b7e840ff39ea782f979bffd6eac1c430

  • SHA512

    55ce9332ba7b74cacdb163c1988ad1292c111fce222ec9d3d9b39322b473c2baba812a742a5d5ea778f36416494a109a9c3503bf1159d04e1a3446150528d4e7

  • SSDEEP

    12288:fozGdX0M4ornOmZIzfMwHHQmRROXKqF3sT6+pegGvujxpYeJpDegjssHA8:f4GHnhIzOaG3s/e9vWpJpDega8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NTFS格式转换.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections