General

  • Target

    b81be1a34bffe8b5f17c91fec9894e3fde43e59012aa59bfce266f5c0b042bbc

  • Size

    457KB

  • MD5

    13a741fa24a290e0ae8815a2e20a03b1

  • SHA1

    59815fecce4a2434c1917227e7a4a00f06291582

  • SHA256

    b81be1a34bffe8b5f17c91fec9894e3fde43e59012aa59bfce266f5c0b042bbc

  • SHA512

    e64c874516a1e7178ffc88185820d3905d1ea1231357bd6c525e0937e3971bc32f277dccbde9a3634becb666d042e71cdf5c93c8773f1e0ca667e63eb69ec0b3

  • SSDEEP

    6144:yY+32WWluqvHpVmXWEjFJRWci+WUd20rUU5EYCTvaBju4zl:hnWwvHpVmXpjJIUd2cUusvalxzl

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b81be1a34bffe8b5f17c91fec9894e3fde43e59012aa59bfce266f5c0b042bbc
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections