General

  • Target

    一键系统文件转移.exe

  • Size

    383KB

  • MD5

    f00605686fab7020007d70ac6f948d31

  • SHA1

    4bc2410681e67a4bf3708417b065ad8c9fcac37b

  • SHA256

    3fe187bbcf7bf0a40b10325406024206f6ccbaa6e5431d12e6e434e48209ea79

  • SHA512

    a8fd39a100e9338bd30c77e010e327b98d993f6e3503d2794e58f485fe0c1037f2f9552fbb8d685ad872f1f31b0119fb8c69fcb28dd039cdba38b42838e012d3

  • SSDEEP

    6144:PVOfZTZiOydo+h9g1V5M4orn+GrtY36V7w5KjM9AC9LzfMwHeOQoFRROX7ODQe/Q:NozGdX0M4ornOmZIzfMwHHQmRROXKt/Q

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 一键系统文件转移.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections