General

  • Target

    0dc57aacdd768ddb69f8ae39b1ab3bc17605908b6c98cbec883803deb8230d76

  • Size

    512KB

  • MD5

    a8d4319c9b131d5e07c71bcadc220171

  • SHA1

    5db54b926d39a0778cb3162bc8b8cb30663ccbaf

  • SHA256

    0dc57aacdd768ddb69f8ae39b1ab3bc17605908b6c98cbec883803deb8230d76

  • SHA512

    a01c2bf917ad9d164bedd65c954e872adc0253480fd46a0f1268a106604d520bd7dc741368007f6ae6e1f04bd2970ca6d6d05dd48ed70cd9298ece610a276ca9

  • SSDEEP

    6144:nssb/HLQ0UzWZDt11qZfAvi9NgpbQxOpGubqwqDgwebuLRmiJb16M0d4f1YoSWCY:nhcZfeiP0JpGJDgwebuLRmi/f1YoSo

Score
10/10
upx

Malware Config

Signatures

  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dc57aacdd768ddb69f8ae39b1ab3bc17605908b6c98cbec883803deb8230d76
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections