General

  • Target

    a41de82338d9d4dc5424e6702f9378ba449bd42bd9c9e0b60fd5ed9bb4cfb1f7.rar

  • Size

    637KB

  • MD5

    42d106c2c4364d4d5d7993fb7204ef68

  • SHA1

    28d9f1985387c14168a5885733b5c1f2873c6b22

  • SHA256

    a41de82338d9d4dc5424e6702f9378ba449bd42bd9c9e0b60fd5ed9bb4cfb1f7

  • SHA512

    5a3a602038650c7015246e97b027f3c09d475e4b216de8bfdb135a61a0b79675db5339c2a6d296fae5598541eca1c64338374da432a9ad318a3fed7c544b3c9d

  • SSDEEP

    12288:66IpB6L+9UHGC3zE8DSXiAJCopJRkGBIge75R0cM4IG3PbIG4Q7:66Ipy+9h+E8DSyMBpJS0IgW0GIG3Pb5X

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a41de82338d9d4dc5424e6702f9378ba449bd42bd9c9e0b60fd5ed9bb4cfb1f7.rar
    .rar
  • USD46k Swift_PDF.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections