General

  • Target

    a14a692229ddbfa219cec344079da149.bin

  • Size

    731KB

  • MD5

    d1a907d4dabba4b8aee3b0feac0600b5

  • SHA1

    ec86024609ad642f7eac381b41df415f0b61c2a0

  • SHA256

    1c47408b1b979ad6d679f29ade85218d5104dd84b553af8b64828e836f17ff76

  • SHA512

    ef497110a1815166de5876cedcca52e34ca879702321d79ff773eec1810dbc58e56d751ac1b9f185aea376f19bf87373350bcd1bee382f06dda3b6bcf38f9f18

  • SSDEEP

    12288:HZC5uwWtx9POYtriQeO1GShfdsBmP81XAJ7w58NcCswMBDrs2rK+yqhmJhPcXnFX:HZC5uPsmOQejSJdVwXAJU5VdrD72ZqwA

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a14a692229ddbfa219cec344079da149.bin
    .zip

    Password: infected

  • 052dca4820559afcefaa0fc6769f8095e160d887a1e08e9393e4da9d3fa2a7eb.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections