General

  • Target

    05072024_1449_04072024_發票.rar

  • Size

    603KB

  • MD5

    9d5bfecdb22d1febf79a940ad5648ad3

  • SHA1

    da06173497e364de8e1f756e9c3a8bba1c11b20b

  • SHA256

    8486f181bab99eb0df17a9f85acb7425e2bea61850cac01b3938bea2d3e056dd

  • SHA512

    03285da7ae010bc53c08cfe8b378f14385cd40ac3c9a000ab36eb55b1b3520245b3dbf1534dc2482ed726dde0dd84ddda3a5afd6898cb6e9bbe30af693b28288

  • SSDEEP

    12288:YEPJkGX7TO54/1KnQkDtFfrAFzyn6BB7gH5Rjl7Am2dV7Bhg:zko7TOi/18rfsn7gZveV7BK

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05072024_1449_04072024_發票.rar
    .rar

    Password: infected

  • 發票.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections