Static task
static1
Behavioral task
behavioral1
Sample
upO Builder 0.9.7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
upO Builder 0.9.7.exe
Resource
win10v2004-20241007-en
General
-
Target
upO Builder 0.9.7.exe
-
Size
3.4MB
-
MD5
a6b3b0ef9a6ee3c74315a2b8c573e5c8
-
SHA1
80b75a960a383a824e48dd196416517e7e0525ec
-
SHA256
49e993c3c40c13c28e32c53e90dde544665cf47ff43d418b7cba94fdf37db82d
-
SHA512
a3c0363520c40e1e7cd247d02b16add2bb3ad8543e3afce2072b72787a807e8c07158b9f7a5fd5dd80156603bf83319d5593ff41f66781fb3d1729441705001f
-
SSDEEP
49152:hyAYRocp2X2bSLO1lYUcf9cAJXwY+7zB1patZVDY30e+h5BtqQ8O:7YLM7CDYd1JgL7znpcPeq5BtX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource upO Builder 0.9.7.exe
Files
-
upO Builder 0.9.7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ