Overview

overview

10

Static

static

10

f047126b6b...05.exe

windows7-x64

10

f047126b6b...05.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f047126b6bb1f6e427fffcd9b92aab09d484dbeae6619ab85f42f82ae2c13e05

  • Size

    487KB

  • MD5

    ac9c5f83e4e4e0e2156f1542b506cec9

  • SHA1

    3cf2f58ddb1992104d12806d24bf81a152d1e376

  • SHA256

    f047126b6bb1f6e427fffcd9b92aab09d484dbeae6619ab85f42f82ae2c13e05

  • SHA512

    9b5392920befbe80db81591241586945cd95bb1dc59ae5c8e20b9a40751703faae82e3720809e5b9fdf8f0d01b29ca103b710689a829767d20c348b09d62e739

  • SSDEEP

    12288:2R/y00bzAlvpYq1orkEHck8IzDqY33k0erdxuwrL:2fMgsvqY3Crdxu

Score
10/10
upx

Malware Config

Signatures

  • Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f047126b6bb1f6e427fffcd9b92aab09d484dbeae6619ab85f42f82ae2c13e05
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections