Overview

overview

10

Static

static

10

sample1.exe

windows7-x64

10

sample1.exe

windows10-2004-x64

10

sample2.exe_

ubuntu-20.04-amd64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cs1.zip

  • Size

    550KB

  • MD5

    e3c79cb1d84fad2b567cac851e216d67

  • SHA1

    6576861ca202d6d3dcffdcf2048c7a7621abcd4d

  • SHA256

    92a439c2c5d3bb748830980a81137bfdde5dd0c4ff4d09fd32f969d613011f2c

  • SHA512

    427e8a247bc8d163a8ef4c9d126249232bb15fb100a2c91f7ba7bd6c25d29cd7e4819a368472f17c84a800d4d0c32cd351a32b18fa4474e7428426f9b6af5210

  • SSDEEP

    12288:tykY9ZIKzEIM3er8W4KVGZOcXzN6zNsmZsjYdG5+gco2GZw1Zd:E87IM3SY4Gg6zEzh1O+gcCw1X

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/exec

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cs1.zip
    .zip

    Password: malware

  • sample1.exe_
    .exe windows:4 windows x86 arch:x86

    Password: malware

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • sample2.exe_
    .elf linux x86