OPuJLhAA5Z[.]exe | Triage™

General

Target
OPuJLhAA5Z.exe
Size 4.9MB
Sample261006-qldd3sfa83
SHA256 4c33686f8d09754606203c77e48350f34ffe2c7ee76ec2feeb7cb2578a532b4d
MD5 5d4b787260308941f5653b0e1194d687
SHA1 8c20003b379529d337149365cd0f44263f9a5cd6
SHA512 5f3d1a29470d96d450057bab9eee52639c3814260af515c70a0b24742f2024e12ec6ccef796b00742f56d4fad9b22fabecd2cef7c59b9e458ac43b645880f036
SSDEEP 98304:oo7J1mhOXdJKCPuThYGO30GYRhkcU+UHe0QO:l1mhOXdJtKhYREGYo9Hbn
TLSH
T1BA368C03F26252E8C06AC5B4935AA232F7353C8D432579EF5BD05B212E65FD06B3DB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OPuJLhAA5Z.exe

File Explorer

OPuJLhAA5Z.exe

.exe 4.9MB

OPuJLhAA5Z.exe

SHA256 4c33686f8d09754606203c77e48350f34ffe2c7ee76ec2feeb7cb2578a532b4d
MD5 5d4b787260308941f5653b0e1194d687
SHA1 8c20003b379529d337149365cd0f44263f9a5cd6
SHA512 5f3d1a29470d96d450057bab9eee52639c3814260af515c70a0b24742f2024e12ec6ccef796b00742f56d4fad9b22fabecd2cef7c59b9e458ac43b645880f036
SSDEEP 98304:oo7J1mhOXdJKCPuThYGO30GYRhkcU+UHe0QO:l1mhOXdJtKhYREGYo9Hbn
TLSH
T1BA368C03F26252E8C06AC5B4935AA232F7353C8D432579EF5BD05B212E65FD06B3DB1A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

26KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CRT

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

201B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

OPuJLhAA5Z.exe

generic