Ugopbyoa[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ugopbyoa.exe
Size

1011KB
MD5

2890064b48d36a0cd875da8608f3b23b
SHA1

e517130c3f654ae558001b61138fc598a6de0fde
SHA256

39fdc2f771ca4310602321e5d1484b3f8a6ccd4ad93874e1394feda5c72d18b1
SHA512

cddae864ec26dcdf57f2c400a67f51617a712c984c7110eec2db1eef22090be1240c8cf0913282081e45965306fa0ce1714386380f4ebb9f84efaaffd1e6fad6
SSDEEP

24576:FLz6yvg7mrFiR5aU41WD3qNcIp6gbQe6zbbVUEkNImqsbfJ:x+HuFiRsU4gD3qNFp6qEVG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ugopbyoa.exe

Files

Ugopbyoa.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1009KB - Virtual size: 1008KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ