General
-
Target
Javlonbek Bobojonov.zip
-
Size
1.6MB
-
MD5
fb32224dbc800d7785f8c2fa58fa98c6
-
SHA1
5d6fef9c9fd2b9cf7ba0c90d0faaa28860240b2f
-
SHA256
50c289fd59ad42d53dfa95ea13a5aa42a6116d655b2956636737a5816ed55b0b
-
SHA512
480e16f6c27c85a23fd7afa6c0791434d2abc945946fa815f481d4c3275315caa5f57e44dc52f1d82a7179bcccae0d8b3b502b2bede30c87ecefb7ed1d4c40fe
-
SSDEEP
49152:ixzZ7+QPldlI/1ngJRzO5NXoppf3mV0m38sivlAkf:ixzFlbItniRzgNXoDeD38ZNAkf
Score
7/10
Malware Config
Signatures
-
ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Javlonbek Bobojonov.zip
Password: infected
-
javlonbek_bobojonov_cci_com_uz\Documents\Документы из старого компьютера\D Диск\1\Для перевода аудита GAO\PROMT 4U\Patch PROMT 9.exe
Password: infected
Headers
Sections