General

  • Target

    注册表转脚本.exe

  • Size

    2.2MB

  • MD5

    01b87bf3557b0f1ec88deb3bad8c3440

  • SHA1

    576f1ae7ced3d31dac25deb9ebce00fc6902d925

  • SHA256

    5c81fab529392d5bbce4d26c0f0f89d4a3c38288f7a0f14abf6aade42ea87bb8

  • SHA512

    0ddea9100735039f6f7b4631e6d7edb034503e61134a1e1c15415c2f885defbd92a2239bbf5497a27d5ac93e97f1b8fb5c41803518f43af209c707850b8eddc3

  • SSDEEP

    49152:0RMIu30BFl2hTaYe29XFtj0zgjYlLr89lDsj7RiWlXIAPuO6Ba:BIu3iv129vji78XDsnRisIK9Ya

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 注册表转脚本.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections