General

  • Target

    13092024_0330_12092024_signed contract and order confirmation.zip

  • Size

    558KB

  • MD5

    1e3e964bc77375c536f22ecf2980db43

  • SHA1

    1507e05cad26cf1d7e3f4fd3a44d56fabffcdb8b

  • SHA256

    b523ce0d2721a3591eec738abaebe3b4094044cbe49a5367c92e6cd782a285e7

  • SHA512

    5ca755182604d3c610505104d4ed0a94cf45bcaf257bc48c69fdebd46bbbdcd74ef682976e817f18f0f6c9065246199620ec9f77cc5f11386d141150c85cfacb

  • SSDEEP

    12288:xnkj5IXSz0NDgyjk2wt7Tb6uiJzkyxKHd2mQ2sXgRBIWE6C:xnklQSz0RgyjQ/b6LldxEd24swTIW1C

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 13092024_0330_12092024_signed contract and order confirmation.zip
    .zip

    Password: infected

  • signed contract and order confirmation.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections