Static task
static1
Behavioral task
behavioral1
Sample
Update.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Update.exe
Resource
win10v2004-20230220-en
General
-
Target
Update.exe
-
Size
8KB
-
MD5
8f2c39f8000e3216526901e6b8a329ef
-
SHA1
b990392e0c5788510ac03ad6c665ef478b736c01
-
SHA256
c0a6a44eeface54b3f7051083aa627e66294d1503386787a832c9f5c5221fda3
-
SHA512
043d0d0d6a26e61ff56b2d6aa05542b0aac63d31037abd1069102f425d7f27a50481329f26e0bb19bf4cff8aa392e3beedce799131f03dd7a76b8aef517b0ea3
-
SSDEEP
96:DpTSG31b1dkMZfM0VD4mNR7jsHStnsSmR5PuDVnGWsPSolWGj44hdzNt:RlxdkKf1HRafPCd/olpj4iX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Update.exe
Files
-
Update.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ