General

  • Target

    WinFontsView.rar

  • Size

    41KB

  • MD5

    db0ff5e44cdd7d718fc85bdc2c5ac957

  • SHA1

    315570d42ad73a9954b3a033d849dd3598527924

  • SHA256

    1d6f69d6a41aa0b52728cd3e6855e20d17cad83a3d5c2a456ca438c9716ac9e5

  • SHA512

    23936d6ae02f87b4ca4567c9d746c1cf85161d1b2960d58befccfa0b9644a702f27607309955b9eb992b028912dcb128ae58c091e7522790616ed28c3694988e

  • SSDEEP

    768:nWJPZi5yyF+OCDOCqjcD6yuY5zpKNBeWVEHBIQcMKttAWaz+FPI+2SZIOvEev:WPTOCDfqQAQzUhL8WazEHsc

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WinFontsView.rar
    .rar
  • WinFontsView.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections