Static task
static1
Behavioral task
behavioral1
Sample
Ov2Upi Translator 2.9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Ov2Upi Translator 2.9.exe
Resource
win10v2004-20231222-en
General
-
Target
3c5158f54e01a22d9a538379a9fa94da
-
Size
491KB
-
MD5
3c5158f54e01a22d9a538379a9fa94da
-
SHA1
da13c6bf1e8e1a269b8d7dd7057cf904f54113af
-
SHA256
5e827ccc9fc7bb9c4cfb4698440a80242f937c2d45ec8f3900fdf3eaf32d88dd
-
SHA512
3922530cc1490028126913611a7729f4dc0077b8968d14b7f69afe810ee425bf2e7c8d5a80391dd899a98a749ae05c32e97e3c6ec935a8b1f7c102e9d98230da
-
SSDEEP
12288:8BgQ7muqoAJ6Xt/NBHQYi8UorJh6FUW1ywZV6DFK:ycoAE/NBQYxUoFgFl1ywZQQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Ov2Upi Translator 2.9.exe
Files
-
3c5158f54e01a22d9a538379a9fa94da.rar
-
Ov2Upi Translator 2.9.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ