General

  • Target

    ByPass DCBlue_cite.exe

  • Size

    22KB

  • MD5

    94166d636815340ac465af17ff132f85

  • SHA1

    a86af71c751462496f5283b17b6393898a0cfbfd

  • SHA256

    2dcf83d688460edcc439b27fc3c9e05b893273e321439d6f33b7ad7a5777ee01

  • SHA512

    2089afb6e84b626ed9577a97859775f2b4de971555c870aa85f597c66cf31a26a6c75f5dee2ec6b64a689d76dc5c28f199843b0f63e83ea66f692fecdab2ca28

  • SSDEEP

    384:gaOg+e7HIQ0kWiFtBhHY0zN28WY1HEAiuazuIm7DNsuRScSI3IQdHnfc2aVAAPUW:/OTTfkWiFtBhY2WYJEAE07CuRdSI3xti

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ByPass DCBlue_cite.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections