General

  • Target

    5db4520d66aa9189a0492fdf8bcaacf7ad40e34a1c7b1c70ba751a2eaf2d68ba

  • Size

    163KB

  • MD5

    a884b1b52ed4936243f8d50a3a8cd52f

  • SHA1

    bed579e195bb5b63a7f19cfa144f54e1ec2395f7

  • SHA256

    5db4520d66aa9189a0492fdf8bcaacf7ad40e34a1c7b1c70ba751a2eaf2d68ba

  • SHA512

    a42a58e56e25534e962e8afb69d6f4dce23f9eea81c27c7e71d89856511dd9f23106bc7eac885ceb55e2c8352bdc2daa605ddd7a4c4a926f74cb1c7f600cce65

  • SSDEEP

    3072:KKuKo4a9MtQuHbKCCVCCCCCCCCCCCCCCCxlxlmCCCCCCCClCCCCCCfbHeltOrWKD:KfL44MOu7KCCVCCCCCCCCCCCCCCCxlxG

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5db4520d66aa9189a0492fdf8bcaacf7ad40e34a1c7b1c70ba751a2eaf2d68ba
    .exe windows:1 windows x86 arch:x86

    c2a87fabf96470db507b2e6b43bd92eb


    Headers

    Imports

    Sections