General

  • Target

    PO 42050 EXP 1423.rar

  • Size

    712KB

  • MD5

    c3f86895a1acfd35accdb6cc383dd35d

  • SHA1

    90a20ff9a08166bd3c4b0a509e6f6d3f068334e9

  • SHA256

    5482f30f4cd3f124c272a13129c770cf944090ae9ef6e1e6a82a2d2bd745a6a7

  • SHA512

    293dd4a39c7e26fe9d9133e520b8650b0f02a8964e3b13b170dc7b4e5d6c53b63dfa755b9a59273bacf3fbcc92d882cd4078c33367b86a258a4b8b07de00a793

  • SSDEEP

    12288:Qn3mm/KL6RjUSG2ahIyb9v+PGsUFi6GFufnJrjqRou02hsedkrtkm40NnsngLsxG:QWmVRjCXhIyb9v+PzU72O5UVerThNZIy

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • PO 42050 EXP 1423.rar
    .rar
  • PO 42050 EXP 1423.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections