up[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

up.exe
Size

101KB
MD5

d4e0f09f34c6a90100c932d83b11292a
SHA1

ef87bbdcfc247dd48cd270de68702f7d0177554d
SHA256

6b53de90d4c71ace801f6208d6a38c6e59a7e5d50de83544b9ef7f20c5296de2
SHA512

cffccb52b543bd2e461b21bbc39f1bbaad6a00bac36ed8b555b1b8ff1af4b531160cbbf10bdca4d2dd3b3f7bc171b11afb97cb6191c47d0b66acba6dff135d1e
SSDEEP

768:UbNjs/1T6PPqi7DSlhVtQZsQ/TTiZT3OJhixp3ecnu:iNjs/ZlhVtWsQ/T2ZEE5eL

Score

N/A

Malware Config

Signatures

Files

up.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE