General

  • Target
    60ec502046b8c0d787ad3b5e431c9126.exe
  • Size 16.4MB
  • Sample240909-bxdrnavfqr
  • SHA256 0c41e02ef1c8837307ffbfe5e3c97116808ced2214d34a5517ac732bc2c3baa7
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

File Explorer

  • 60ec502046b8c0d787ad3b5e431c9126.exe
    .exe 16.4MB

60ec502046b8c0d787ad3b5e431c9126.exe

  • SHA256 0c41e02ef1c8837307ffbfe5e3c97116808ced2214d34a5517ac732bc2c3baa7
  • MD5 SHA1 SHA512 SSDEEP
  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
Digest
8d:ff:a2:c0:f0:06:b4:d9:5e:a4:bc:0c:36:f7:ae:fe:3e:1f:96:27:2c:92:3c:f5:e8:40:4a:88:06:42:b5:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Remote Utilities LLC,O=Remote Utilities LLC,POSTALCODE=119331,STREET=d. 29 E 12 pom. I K 5 RM 5\, prospekt Vernadskogo,L=Moscow,ST=Moskovskaya oblast,C=RU
Minor OS version
0
Major OS version
5
Entry point
22637824
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths