General

  • Target

    f23ecfb6e4711bc9d0fb3af8210a311fb0cb888dddee3ee99ee16cf3f06625ad

  • Size

    651KB

  • MD5

    fb9620aef9dcfb67fea191ccbbf37249

  • SHA1

    0730251e4a56a588b1a8c02f60071ceeeeb79067

  • SHA256

    f23ecfb6e4711bc9d0fb3af8210a311fb0cb888dddee3ee99ee16cf3f06625ad

  • SHA512

    0cd459f6828403e03c59027f34614332a4ad378583fb715a3b4133bb67d1eef659f158a957c2c9b424b4fcf5867470240de5945e6beab331d914bd95bdad3f31

  • SSDEEP

    12288:0eUytiZZd2kwyE4PBWfJr8aqfRQsLhNULIGPUt0aQf3EqmFUmtZxXlLcHFR:03ytG2foEf9866e1PUtcf3EqmFFtZDLY

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f23ecfb6e4711bc9d0fb3af8210a311fb0cb888dddee3ee99ee16cf3f06625ad
    .zip

    Password: infected

  • 57ae74fa64d4a55b67e54f0a07d4fe67e73189213c7e3de18e0d03abe397c088.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections