Overview

overview

7

Static

static

7

avg_remove...ta.exe

windows7-x64

7

avg_remove...ta.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    avg_remover_neshta.exe

  • Size

    3.5MB

  • MD5

    cbbc9f95b1679161de3eafa32b4f98ac

  • SHA1

    48bef65254353edb66552412d009c5becfc87432

  • SHA256

    c562b6b0616c72b2949bc5a956493a337525d556fa110e7e50948a1aa4ab2afa

  • SHA512

    b8cbcf7f80590cd72e7ad5356a4443f4ae9425345858766fd34d840a39137561a43fe09f69af7ede4a18d51c4651274fedafc6d254f504cd10f2bab96d29fa1b

  • SSDEEP

    98304:ofPSX9zajazj39M2T26lhf1seeO2b9Ua8AXj:ofPcPFHfV+j

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • avg_remover_neshta.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections