General

  • Target

    JJIFWE.exe

  • Size

    632KB

  • MD5

    68b156b2cc1aa63158810bcdc132f10a

  • SHA1

    9366afa93555d37c3ec54fb9facb3b4584e879e6

  • SHA256

    9eadf29fd1e4a9d4c475066d36d91ffe3fcf6b88eafb80caa38886c90cfa37bb

  • SHA512

    7c194c8b7771a6321197e772dafe898eeb06d9a9c63e1652180bd987f4e3caf51c5b3152765d34b1f2f7756b9f608e53bd1132d6394ad9172e82bb756a07e213

  • SSDEEP

    12288:X6Wq4aaE6KwyF5L0Y2D1PqL67qhBkEFY9ddNdyYaTW3xfgCk4o:1thEVaPqL6gkF4YaTTCA

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JJIFWE.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections