General

  • Target

    def475a70d634b852cd1fc06d00084e1b5b09a245924f791afdba14162e6de12

  • Size

    364KB

  • MD5

    00d7e9797d5aac99efd2d743377b17d5

  • SHA1

    eecf46ceba44a5523c0d9dd29f8c8cebd5afb393

  • SHA256

    def475a70d634b852cd1fc06d00084e1b5b09a245924f791afdba14162e6de12

  • SHA512

    785d7ed10d935af0b43321165c52f0451894b8618b0af85d14feb820164ceb4554a407f9d61407a2aa27eb4eda2712ea4d689520c6a788b284d949e3303be382

  • SSDEEP

    1536:WzXF8CvrJ4PBhDP3526hlklProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:Wh8k6DP3U6haltOrWKDBr+yJb

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • def475a70d634b852cd1fc06d00084e1b5b09a245924f791afdba14162e6de12
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections