General

  • Target

    9f782b32f8bff4d1ad4cc826ac12c504e5a8af66fb5be7d74223588b9a0e137f

  • Size

    557KB

  • MD5

    bc9547168eeaefc863c59d33fdeaf235

  • SHA1

    ba632f05e194a0e86f1b4a444b0a4cd72e68819f

  • SHA256

    9f782b32f8bff4d1ad4cc826ac12c504e5a8af66fb5be7d74223588b9a0e137f

  • SHA512

    120a5ac991b096ba807f02979f60e5913852c3bac67f4483c19c177f8b9c89604031f3b8b0072a384452940fd6195d5f8825ad4fa563979c1998b03eb967aea2

  • SSDEEP

    6144:CITZCJajimLmDLaa36EU+4/2VHnBus/0+7d:CITZJjimva36E1zV7d

Score
10/10

Malware Config

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9f782b32f8bff4d1ad4cc826ac12c504e5a8af66fb5be7d74223588b9a0e137f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections