Generator Death by upO v 5[.]0[.]rar[.]zip | Triage

Resubmissions

02/06/2024, 05:55

240602-gmqw5ade84 3

02/06/2024, 05:51

240602-gj718sda4x 8

Sharing

Copy URL Twitter E-mail

General

Target

Generator Death by upO v 5.0.rar.zip
Size

589KB
MD5

f77b7afc811c42f31d80bad5e23b717b
SHA1

095e39364fdb58a2c72382d27d793c228659803e
SHA256

02a902a36b257e4d512bcc71edd44774f97ecc96aef5d49422be01e66c437245
SHA512

125716581b47d0abba1ae766ee633674e0cb2c3f14ea45a9b2b1594d7943c6b2f08e3993d38779e8b9780d590f9f28e281a8e39f8d9bfc144c92eb4d3acba6e1
SSDEEP

12288:eajY7nWD6oJOfRpBCKzDqnLCV6INVsK1NQstweAy5/Eg5dqxnr:LY7Wmoo1E21wK1NQNGj5d8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Generator Death by upO v 5.0.exe

Files

Generator Death by upO v 5.0.rar.zip
.zip

Password: infected
Generator Death by upO v 5.0.rar
.rar
Generator Death by upO v 5.0.exe
.exe windows:4 windows x86 arch:x86

63602515e7a335293788d2b5500afb4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

OleUninitialize

comctl32

UninitializeFlatSB

shell32

Shell_NotifyIconA

comdlg32

GetSaveFileNameA

msimg32

GradientFill

Sections

CODE
Size: 521KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE