General
-
Target
主业修改工具.exe
-
Size
367KB
-
MD5
5e197a34f29a1b2bda5343c839bc664a
-
SHA1
b52846c539e8a2bae373e4d50a102161c8e3b513
-
SHA256
653f61432577b6e1608b55fbe92af5380c6373ec2ad100885d4ab20ad48ec2e6
-
SHA512
d6d3b4d7427378ced51327ade41a8898014a5d45c0e1c6b80c832b9c3ea855c64e53d0b6cf16a49f5e79ee50eb167d7e67f026302cd477725131c3cf6d010f6d
-
SSDEEP
6144:fzv+kSZBbdH19ex4T02J4fqz22tvymTiB62iKnWKKmDTcNwjreO/Ss9G6DMzh9pd:fzcRD02J4Sq2vHGB67KWKKmDTn9G6DMz
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
主业修改工具.exe
Headers
Sections
-
out.upx
Headers
Sections