Overview

overview

10

Static

static

7

INVOICE.exe

windows7-x64

10

INVOICE.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    73d037f4aa3a9fd524b076122a584003.bin

  • Size

    651KB

  • MD5

    725827aaed061c5697cac5b9ebea6fed

  • SHA1

    82db45345bc9681a8ac8897dfb69cbb1ee395fc6

  • SHA256

    b020ffa130d52bb16cecb7a9310ae2b388e36f42ecc3d0d2fb0bc3512fbd6d86

  • SHA512

    8dcd70ebc105fbf8218828de283eeb1fae1d947e88375a5e1c7b99357b8b442b69b0f9789ef8c3e12aa703df51de8f82a5d46987bcd949ee8b6bd4a92ceb469c

  • SSDEEP

    12288:D/y+C0zO0zkd3rg9DHvkqjGSrf3AQpUL0DQgcG5xhGmWblM3y2jSVWRhh3uvX1:by+CX0z+6DHvZqSrf3Al0DQboPGmiMCv

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 73d037f4aa3a9fd524b076122a584003.bin
    .zip

    Password: infected

  • 08e698eb046a020c96014477ae6912742eb59004ce021af887786d4db7eca89b.7z
    .rar

    Password: infected

  • INVOICE.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections