General

  • Target

    240904-rfqynashmc_pw_infected.zip

  • Size

    81KB

  • MD5

    f6f9a835887f5cbbb3325ad3fe0a2f92

  • SHA1

    0b1eb02498a7186552a88e60bf60849603aca925

  • SHA256

    ec2d737ffc543faf67ad320785a039f70fde3835634a2c554cc6a9d218e41ef6

  • SHA512

    7ed2ca5d8ef6059fd8f11583771cbe930c1d101349f48a25d5cc53fd411fe4b1c93cdc4598fbb3e9a785d53f9f46c0d17f1924142104a4e8e37448e59583ddf2

  • SSDEEP

    1536:kb2KFeg3w+WWw11hj9tdY5qiLooDbwKvOa1nym7HLEw1ZfF2P+3vQitMuuaM:kb8g3w+9wl90hDbz1RrX2m3vQ35

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 240904-rfqynashmc_pw_infected.zip
    .zip

    Password: infected

  • 5525f6e4946c25ab7f8c0dd45f851960N.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    ebc6265200d8989371b723b2f52c43df


    Headers

    Imports

    Exports

    Sections