General

  • Target

    Downty.exe

  • Size

    1.2MB

  • MD5

    1e2979dd1d6791f148e306d1f3c06b9f

  • SHA1

    4436fc85d2d999254db74816fc5cdf9f65c2dfef

  • SHA256

    7204bd33b6bffbc41937868a317984aad58935005297d542026de125542adbda

  • SHA512

    40d71d93cf323f695e67ef804ddc566e4cebd4a39352b09e1bcc8a7cdcf690b872681691f6fe8f7b17c1cb7555cc586f892ad33439ff2416ce3ca41f6e688b79

  • SSDEEP

    24576:3UWjEmPLnItWoa3yGaJxh0I/oXfhv+aeMQGl86GD+gP/jgKtMt:3mmPLnIsn5aLiI/oXd+NU86GD+g3EKtM

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Downty.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections