General

  • Target

    wzoptini.exe

  • Size

    368KB

  • MD5

    e4eff021485fd9e7050c2beebc30a376

  • SHA1

    e807852954c4f3ae75a89c374fc484f3d5750a13

  • SHA256

    d7738fb96a64acb01229d064154c0c56cd89fa0a90ec3988e96d35f41a7d6d69

  • SHA512

    5e5eb97c238a369c53a245c48b923bf45a20ce9cad29debafa8a59e3a04371e9208abc1d0a6346e45121142be03224303aaa63deb87ca864258e2c12c8a76e7b

  • SSDEEP

    6144:1MJt6tTmWjp1P4xm0ovCs2Rh68815xYasf5eIltnaToecFHzpPoPWDMY:46tyWjX4LovCsYi5xYZheILnhXFTpqMB

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • wzoptini.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections