Update_obf[.]exe | Triage

Sharing

General

Target

Update_obf.exe
Size

27KB
MD5

654177c45d80f2ae35345a8b787edf38
SHA1

f6a1a028186982e955e73f1968e05387d87368f3
SHA256

c110b4c3f2aaccadee51d7a2a5f5e732204f404148b444aae65a1056d8603872
SHA512

148be201ac783493abd7cdba2fec0f6aa595a7b53dced8b6618ec59c7306a8938bcd4e73ede61d1e2de89a18030ddb10d13d8cea8d4fa6866662b2ad1f9f68ce
SSDEEP

768:BkaeKNZRNmxSDdPgugPDv56zsFcYEKFGlyYdXa4P7ng0:Bk2ZRNm2gHl6JUY04P7nd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Update_obf.exe

Files

Update_obf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ