General

  • Target

    MalwareBazaar.3

  • Size

    616KB

  • MD5

    369b453dccc0b2e73c1b0f874ecabae1

  • SHA1

    edd42bd4a3dd1ef56b4f50ecb907a23e926e0037

  • SHA256

    ceedf7baa54f26e7901348cb60b5956d799c49e140ba2144844a8943a861b7f7

  • SHA512

    4dc852f411c8f78145fee4e9aeba83fb83ded6cf7d84a491581d1b0903117f10edc544e3b7e283b3ccf70492f7ec77640957b64afb4657c3ea87f175947f761a

  • SSDEEP

    12288:uCqm3j8CcjbSZg3mR6LwjvZnUK0SI0+ogkYfeY2yQc6r5RO3nb:uCqm34C8mZculdIUgfeYhQFOXb

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • MalwareBazaar.3
    .zip
  • CERERE DE PROPUNERE.pdf.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections