General

  • Target

    4471c84cf5adb1e28908ff15d786d3e49a3265ff67bf9b7349adcd79ecdb8b33

  • Size

    958KB

  • MD5

    ac175d06b6da8cb37e0ced50ca375e04

  • SHA1

    74644eba6a362a0442bd4e3c06fc36174a88ec8f

  • SHA256

    4471c84cf5adb1e28908ff15d786d3e49a3265ff67bf9b7349adcd79ecdb8b33

  • SHA512

    0e1b998ed0c9142497d96467e95c7d113ac4f255de8bf2c657255be48e9ac079224ccbcef09a182d63d63ab529fccea00cceda00d7f579019fe418eb62a1e30f

  • SSDEEP

    12288:tV3Dgs69S6IuJQwrxOtsRhEQDNePRxFFpsNKeeRBQ4Vg0YtjZVxz2VfPeq3yE5GR:r/w9VJzk0hEAAsez7CNz2leqj1HmJfn

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4471c84cf5adb1e28908ff15d786d3e49a3265ff67bf9b7349adcd79ecdb8b33
    .zip
  • RFQ REF-JTCAJC-QINHP5-TIS-L0009- (AL DHAFRA) AL JABER - SUPPLY.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections