General

  • Target

    PO 3652340.pdf.exe

  • Size

    697KB

  • MD5

    2be4399b8d378c67c59765963d6be95b

  • SHA1

    00f0311c185585bf89456117fe82b0b1254c8fc8

  • SHA256

    acc92a65ca022b4655bab496f447640dfe74055e9fbfcdf63e3e681ddf6b3bb8

  • SHA512

    89dba0687e3d7afb09a9496ad8dae6d06dbeb21815c4a0a0eadf8a65eb545b59f03c025d4d462f9121d452c0c9bc74e4b2494b0c2450f7af210a7b655c2054cd

  • SSDEEP

    12288:EYV6MorX7qzuC3QHO9FQVHPF51jgccCIPmhrctaKOCoV0t4b6SMyeug:DBXu9HGaVHGPmhg7be6go

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • PO 3652340.pdf.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections