Static task
static1
Behavioral task
behavioral1
Sample
upO Builder 0.9.3.exe
Resource
win10v2004-20230915-en
General
-
Target
upO Builder 0.9.3.exe
-
Size
1.6MB
-
MD5
f53a6d6696c94df1c86062cd1f08252e
-
SHA1
2c9a1fcdc66cf2ec3efe7f65da3a4f57044de02b
-
SHA256
0201a6ca5e231e00341a00298d89e7d763f2350db2b63ae194d92ceb41bf44ac
-
SHA512
1538f8a5a36628428aed3251d078ac7419eab47dfe94346f7669aefe89be825387a7057f4d7b3168a63308cc35825f0aa0d41cdf912b791a6ad831928bea191c
-
SSDEEP
49152:+QGf5Ycrw1NfajGLPNpY4f2J7z2vyWopp:DXLfN7uR2vy9j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource upO Builder 0.9.3.exe
Files
-
upO Builder 0.9.3.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
"#ZR Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b-bbb Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�b$b�% Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE