General

  • Target

    cb2f952b9bd8bfdece248916edc935e303b264676725f3bfc4f55887098ee444

  • Size

    143KB

  • MD5

    b8e4f62d22aa097baa66c2d29761be04

  • SHA1

    0a159d7c2aaf5420931107695a97ac47f05c1135

  • SHA256

    cb2f952b9bd8bfdece248916edc935e303b264676725f3bfc4f55887098ee444

  • SHA512

    52d986bd2a64d88e2c960c69cd0df0f52a23da7a2b85e1d6c9710a4104168dd03618c45bb84ee9fb0ccdbf4a2ae739ce841f37fe1145bb2d903415ffbe70d664

  • SSDEEP

    3072:Z+jLjWLEFuP7DJsYnUZyfRg3hAkZzX6r2lm/hyA:Z+zWLEFQ7Djn6j3OOTcP

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cb2f952b9bd8bfdece248916edc935e303b264676725f3bfc4f55887098ee444
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections