General

  • Target

    28993e866f01afafa1daef209bafebc5a71681000ee4bb5a35ce03dbee63e748

  • Size

    255KB

  • MD5

    876ee0e80b32732a13f89533a1cf41e3

  • SHA1

    e6edcfad5749957543cb9a1fd8ef4e9500b62846

  • SHA256

    28993e866f01afafa1daef209bafebc5a71681000ee4bb5a35ce03dbee63e748

  • SHA512

    df166e2e8314bcbe516cefd83b7cf013f666573a7d6ba39587ba925dd7affbc6d50f0fc7c3d2546d8d2f5c08bd72d9381ad0d652dee60734f0193730a322a8d4

  • SSDEEP

    3072:MMDb50WrZa8jCgae5+VQkGdUQFDxePZ2SBaQJXkNRtXlNGKaUIQW/qlQBG3mmTJr:1xlZam+akqx6YQJXcNlEHUIQeE3mmBIy

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 28993e866f01afafa1daef209bafebc5a71681000ee4bb5a35ce03dbee63e748
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections