Static task
static1
General
-
Target
upO Builder 0.9.6.exe
-
Size
3.4MB
-
MD5
6e33a06810e18b186a024e0574068c17
-
SHA1
fd55730d914462b79cbb3c017b8324501cc60f52
-
SHA256
47870ac20d1a5c1481fb620028e7f11a080f405ea068444938a4e13a78db2c1b
-
SHA512
95be7f64d3f98ad5ab5d10afc0ee9d5c07bc7ce0b10e53ae18fd5782036292b8769d5936bdd988458058f42470e868db5c355a0228bd37d31023d76ac553248e
-
SSDEEP
49152:SteUocRsAcI6V+ZLOiEbJbA31EdYm/W21jvNN0yxlLx6V7cW+/HHE6:NUlcI1ZLnsem/hjvAyxiuNHk6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource upO Builder 0.9.6.exe
Files
-
upO Builder 0.9.6.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ