ExecPolar[.]exe | Triage™

Resubmissions

17/04/2026, 04:32

17/04/2026, 04:27

Target
ExecPolar.exe
Size 1.5MB
Sample260417-e28dlsat91
SHA256 7a30ad5c504c42d0bd1f2dae0c58e72c74772dec9bf8eb4de240803b007cc11d
MD5 3f1e00b4918f09fa1424c7d56287551c
SHA1 38eb2c1af2ef8c48d465783a5025fb8447a49e84
SHA512 cc56886c5cca8c7f463fe9ce586162a4270073c9f7415ade4a114cb608aafccf857aa262a9d6b4c92d13c1c63b6fe4196ad79bfc7210c563db4a09f38e533881
SSDEEP 24576:d2wrBD+6nn5RYXrsL/6GWxzDyOkhAyZR31FlhVlo9E6uVZnSDqx3xxngqd6t73+x:drDPnPYbsLSP40KRFLhF68ZnZZng86Z
TLSH
T1457533DDB723D47EC15238FE8358C8FED6D4D548C4E56A18A4B22BB214FE7045B2970A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ExecPolar.exe

SHA256 7a30ad5c504c42d0bd1f2dae0c58e72c74772dec9bf8eb4de240803b007cc11d
MD5 3f1e00b4918f09fa1424c7d56287551c
SHA1 38eb2c1af2ef8c48d465783a5025fb8447a49e84
SHA512 cc56886c5cca8c7f463fe9ce586162a4270073c9f7415ade4a114cb608aafccf857aa262a9d6b4c92d13c1c63b6fe4196ad79bfc7210c563db4a09f38e533881
SSDEEP 24576:d2wrBD+6nn5RYXrsL/6GWxzDyOkhAyZR31FlhVlo9E6uVZnSDqx3xxngqd6t73+x:drDPnPYbsLSP40KRFLhF68ZnZZng86Z
TLSH
T1457533DDB723D47EC15238FE8358C8FED6D4D548C4E56A18A4B22BB214FE7045B2970A
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7043920

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths