YUPDR_file[.]exe | Triage

Sharing

General

Target

YUPDR_file.exe
Size

2.6MB
MD5

6ed3ec59a37199546b8d9893d3df0992
SHA1

54c6360d1f5ae9ddd734a976c388184426a9a195
SHA256

b24ad548d9f0b3a3878994cf3cc97f23db47bbd1421866a2fd69bbbb2bbcd046
SHA512

f421b945c387bde993f26e36b83773871e9436031aa1e329bc8c8cace0a182ff7a4b759a2736d163e67a6740f4e127d0390a447eb81987af3686d3049a0d3cde
SSDEEP

24576:Sj5KN2/7t1B8VXwWXqoiJ7XY3/cqwwFPFNd0dioa6Gd8xDnblctGo/hjrYZh1ECq:u5KN2/7gXpcu8Gd8xDn+Pa1e3H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
YUPDR_file.exe

Files

YUPDR_file.exe
.exe windows:4 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

Sections

Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ixotttwl
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ckzleuve
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE