General

  • Target

    SunloginClient_13.3.1.56398_x64.exe

  • Size

    34.4MB

  • MD5

    a1c279ed07bff1d0fbebf8d0053db4a8

  • SHA1

    4ccb8c91bdb5329cbd393279935e3011fa85d72e

  • SHA256

    9f61e23ba8ab90cb6ee2190213cbeb556eb060d8d429f1112b0bb671bd82d243

  • SHA512

    f4e19a6e9950705ca8a60331cb78b5a7aab8b42a81b0ead6ef631dc5c761795101a2f2a713a0acfecf57897747bd55105f91aa61ac1d62efccbb2d792a8ce628

  • SSDEEP

    786432:yAGXNhwsy26anpwf53PyPvoLzZoWbdHJ1XR+4oKMLwRSUFezp:NGL/yOnm5KPvKKW1XROKMLXYAp

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SunloginClient_13.3.1.56398_x64.exe
    .exe windows:5 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x64 arch:x64


    Headers

    Exports

    Sections