updated[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

updated.exe
Size

2.4MB
MD5

5fe9373c25457550a5c36a00b7d9c94d
SHA1

6f7527db4bdec9c253d1cf55e5ff9e67f974a6aa
SHA256

ec87a03340aa1e8a9a0dc166204ac4f488094e30c4b2fe89ed48823a9831c07a
SHA512

ab2f942d014ab289f6a3a2cba3a0489f4241aadcfd4c68190efb9fc62429ab85b5f9f501aeae72fdec87671e35fa00f8440e23213c58ab18ac3abf9170812758
SSDEEP

24576:PEozWqLB4FQ5e8XIZlkcOt/CUKUO6gwYvBDVnfb:3yOucOBwADVn

Score

1^/10

Malware Config

Signatures

Files

updated.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.null
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fear
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.where
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ