0879190ed3901d29869200858fa7f96611a9350a3ac05f5a13c32e63b770419b

General

Target

0879190ed3901d29869200858fa7f96611a9350a3ac05f5a13c32e63b770419b
Size

172KB
MD5

7eb107908183fe9699987041106e6ff3
SHA1

a4cf49f0298c444fa2751f6a53ae42d5217dcd35
SHA256

0879190ed3901d29869200858fa7f96611a9350a3ac05f5a13c32e63b770419b
SHA512

e3c0c8a293bc69ca04bbb55652bae8cb0cda0ced4a0ac8804a8d6cf3fdf3660540956965bfe85845b4cd52c217e2b4d12c5d934649ea60c281b0f635894c6b27
SSDEEP

3072:ec33V7DL8t0e86bs+RoiNfAj4tAtwlp3A:ec33je5NfA8At

Score

10^/10

upx

Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_SQLQuery_ConfidentialDataStore

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.