General

  • Target

    temp-spoof-main.zip

  • Size

    236KB

  • MD5

    b99cc2907f6a8119eefe8e27cdfb6bcd

  • SHA1

    d0337f593d4711cf24b0cd541db0e5a42b08eb5f

  • SHA256

    3afab8647cfa2cb8aa99376fdecb2ce37b346c92f43e93bfd32cb7c151772e75

  • SHA512

    f1588d818ccd381b9e8567a0a604da8d173c0c083777eb64ce2b14d991bea58254b6d95d78d38320a0ed1df779b4c94f2745bb63cd7b84e9c8a2431e1305baaa

  • SSDEEP

    6144:wKM7/74UfdrSGjt94xXA2c1D71CDldKP9IHR:wRz74UfdGGnE74DZI1

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • temp-spoof-main.zip
    .zip
  • temp-spoof-main/.gitignore
  • temp-spoof-main/LICENSE
  • temp-spoof-main/README.md
  • temp-spoof-main/bytemap.exe
    .exe windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • temp-spoof-main/map.exe
    .exe windows:6 windows x64 arch:x64

    1aa8cc16f5b5ed6e592de9ac425650ad


    Headers

    Imports

    Sections

  • temp-spoof-main/temp.sys
    .sys windows:10 windows x64 arch:x64

    fe698619e8737fed9feabf638933fac1


    Code Sign

    Headers

    Imports

    Sections