General

  • Target

    25092024_0650_24092024_Quotation #10091.zip

  • Size

    744KB

  • MD5

    b81aa1557e649e0ef4c44a79e665f742

  • SHA1

    c9c933bee9c26c4b180c7cb9f7d995ce8f24be28

  • SHA256

    682488669b570454581b7b20875cf3f95734ca8da117ebedc23a13b4ebe01a70

  • SHA512

    b9e3c39b6b7129c4f94e4c92cddbc079cd7a7b7c3afe86553285ff9e71d12c0a21d76749f9c4302e5792ea22e00a21b6ca8fecb4fca3fc4d90b9a58684e4f546

  • SSDEEP

    12288:R/gBT51V14eECqni+Oa84aR73OyCsGh5eUVtx6AfDieqV2jqPH88bGVUCYv+e:9gBTS7nt+3DvCVh5eAtxDGevjqPH88/f

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 25092024_0650_24092024_Quotation #10091.zip
    .zip

    Password: infected

  • Quotation #10091.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections