General

  • Target

    13092024_0315_12092024_ΕΓΓΡΑΦΟ ΤΙΜΟΛΟΓΙΟΥ DHL Ελλάδα Α.Ε.bat.lzh

  • Size

    572KB

  • MD5

    c1f17ecebc72a149960cfaa053a42d3d

  • SHA1

    58e7db773991b1cbbb51de936470c94e907dbd05

  • SHA256

    7aab3ccad2c9e2eae8f82c7db33fe5dbbbdde2779e5df2fbce1c6363dacae781

  • SHA512

    63976b9bfb6b93191a5526af0272898bcd2dea8894183e9869606290d64adb95e50768b649213a4240f777245b697b2d749c8b150c5772ee5d52c602f1ad2cdb

  • SSDEEP

    12288:zqHKSYoPvFtOrwAf8XMMYoxV8ERIqkODhB8CLD+pySOTJtl1EcUOY8KZWbU6L:2Oq9Q/gBYoH/rhvLCU/TJPDRY8KMg6L

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 13092024_0315_12092024_ΕΓΓΡΑΦΟ ΤΙΜΟΛΟΓΙΟΥ DHL Ελλάδα Α.Ε.bat.lzh
    .rar

    Password: infected

  • ΕΓΓΡΑΦΟ ΤΙΜΟΛΟΓΙΟΥ DHL Ελλάδα Α.Ε.bat.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections