General

  • Target

    signed contract and order confirmation.exe

  • Size

    583KB

  • MD5

    d6f99a0cc11e32ea897bc97a319748ab

  • SHA1

    006a848fd606c3799ef9ec23ff47fbb81900bc74

  • SHA256

    fd9725ecc7ed625c2174660e7f51f647fff9474f4c21c8ed84e0608bbcc5a409

  • SHA512

    dc1af6b89f41a83d9eb84304fb1e9dff8e62de312f6c1245f1d0850bebd0596ab99e3548df6b36d9db7bb953882c745ee8a94cc4a9258b447fc5dec0ffa9b621

  • SSDEEP

    12288:TXe9PPlowWX0t6mOQwg1Qd15CcYk0We1FY/Hd2sQIsXSBBCWENB:6hloDX0XOf4Kd2EsCjCW+B

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • signed contract and order confirmation.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections