General

  • Target

    f20b9ac329f93ae4351e7e22794363f8ec8d8047c4b26dc7e7a26efea2d65d0d

  • Size

    3.4MB

  • MD5

    f35f433d1465e5a0c99615043ad00e02

  • SHA1

    89508ed44005a63353bf3c5bb51c4f9406f22b13

  • SHA256

    f20b9ac329f93ae4351e7e22794363f8ec8d8047c4b26dc7e7a26efea2d65d0d

  • SHA512

    a050bd1e14c9bf13914ad174132c4b1fdbc3d00d4bfa6eb50f48ff28b4a9b104975ffc914262875f635df4d960733fbfb63bd7c721edc6fa1a40a380c1f491f3

  • SSDEEP

    98304:cruA9S6lp2kysNzX4nAyyWWaao03ZaGCrhUNO9vWHyLIUzPPp5Sn:cruA9S6GJUXW5azAWwLLIsJon

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f20b9ac329f93ae4351e7e22794363f8ec8d8047c4b26dc7e7a26efea2d65d0d
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections