General

  • Target

    a5574c7d63b0aea73d12caa8626f178d80e7698689b7a0d3f2dd24b2e0e0bdbc

  • Size

    2.7MB

  • MD5

    db268f0001cc9b3a0f4385640cc95211

  • SHA1

    a7ba6da8f5390cd28de704298776e57d9bca51fd

  • SHA256

    a5574c7d63b0aea73d12caa8626f178d80e7698689b7a0d3f2dd24b2e0e0bdbc

  • SHA512

    c39d1f283ed5ad50d37a7fe84d94460e3a2fd35e9639b7a9a0ed9b68d1b785ffa4b0115ca8e2527c58e228843fb1a90ae3faf118c3a560a224cd26b3ee38157d

  • SSDEEP

    49152:Qas1ZWWSF0o8kIwt/dbpOq78sR6tEP9xgYAMfqo/:MZW1btDOq7Rx1xNAMfqo

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a5574c7d63b0aea73d12caa8626f178d80e7698689b7a0d3f2dd24b2e0e0bdbc
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections