General
-
Target
5c4b2e8fea0b90dd504d4bc33c78e92e7865755c2393eea37235a7e4f9520c16
-
Size
51KB
-
MD5
a3d1b1ffeb2381214f14c68cfccb23e3
-
SHA1
4e448a37cc7126a4c3765f706d57869900443e50
-
SHA256
5c4b2e8fea0b90dd504d4bc33c78e92e7865755c2393eea37235a7e4f9520c16
-
SHA512
f704c2a67c2c590928323f926424411163869667683d59824fff4866e053aaec0909b3a9ee4cb01bad2704b1aa3e511a45a8332ccc8b2e4df27405d19f74dd51
-
SSDEEP
1536:sWZGE0O/gN+aVRQx1houI8d9OEYtXKybVw:s4GE0y6XVRQxcuI8eEYpKybW
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
5c4b2e8fea0b90dd504d4bc33c78e92e7865755c2393eea37235a7e4f9520c16
-
BluetoothView.chm
-
BluetoothView.exe
Headers
Sections
-
out.upx
Headers
Sections
-
BluetoothView_lng.ini
-
readme.txt