EliStarA[.]exe | Triage™

General

Target
EliStarA.exe
Size 1.7MB
Sample230220-3tfwdsda52
SHA256 11aaa12e58f39f192b4f66e56cd0e343d73b69a48dc77a6dfb936483de120152
MD5 6b8dcb09a6f8e836b5dcc600d11c6223
SHA1 b0a1582b9e9871064afae5cb6b1d369599506763
SHA512 feb8bd04778b29efc9b0128dbfd9562368eb825a560dc610abed6a73de1dc7bd33e5e198b439b36828d0a66d4657e354d4a65646141ad3425bed6fd74cb7fcae
SSDEEP 49152:lJCDpfmhr2qIhBCwb8lIgwylCJHXv5y7lE8X:6HB/b8KgZA5E
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

EliStarA.exe

.exe 1.7MB
out.upx

.exe 1.7MB

EliStarA.exe

SHA256 11aaa12e58f39f192b4f66e56cd0e343d73b69a48dc77a6dfb936483de120152
MD5 6b8dcb09a6f8e836b5dcc600d11c6223
SHA1 b0a1582b9e9871064afae5cb6b1d369599506763
SHA512 feb8bd04778b29efc9b0128dbfd9562368eb825a560dc610abed6a73de1dc7bd33e5e198b439b36828d0a66d4657e354d4a65646141ad3425bed6fd74cb7fcae
SSDEEP 49152:lJCDpfmhr2qIhBCwb8lIgwylCJHXv5y7lE8X:6HB/b8KgZA5E
MD5 SHA1 SHA512 SSDEEP

windows x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

1822848

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 807efc43f171b05c6baa0604b2220227e7bf146dbab6b29b4d9660e4b22fe97e
MD5 5d04d3a70a34c15e771f21f404e804ed
SHA1 ac123484cdb9ade9fe2ff2dc621b1ea6747b94bb
SHA512 884d5f12d146cdd4b0aeef3ea0d0243e2e0c331d0395fb2f695e19658aacecb82c7c35571ba240ab503305fa18100b32a647f93efa59b644812e4b42b8f511fa
SSDEEP 49152:YGTiT0Gsqv0O6tCL90fCndzLUElcjH7GC7j7z8Fx/rAZ4vlo+D9qPFWse:YGTts6tCL90fCfhqA
MD5 SHA1 SHA512 SSDEEP