General

  • Target

    5cf6309166d5b2af7c32724307fd3d2672932d2dcd4fc5cba7dc002b4215c696

  • Size

    322KB

  • MD5

    ef3f1bec2fe9fd9063accf7202bc1e7a

  • SHA1

    293dfccdfd24919cc2c7de709aa372b9bbce9220

  • SHA256

    5cf6309166d5b2af7c32724307fd3d2672932d2dcd4fc5cba7dc002b4215c696

  • SHA512

    c4754d365605a200be5befe345403f4a813c773040b9681aed850ffe278ab34f9177626a23ec6abe283a4b6ccfeaf58785c5b07b8f68baf96ed5d3ae7a7d7ad2

  • SSDEEP

    6144:3/s1KGGwuvM0bx15VRYqo57np6P122wRt/89:ywxkGXR9oBnMgLR

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5cf6309166d5b2af7c32724307fd3d2672932d2dcd4fc5cba7dc002b4215c696
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections