Static task
static1
Behavioral task
behavioral1
Sample
AutoupdateTop.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
AutoupdateTop.exe
Resource
win10v2004-20230220-en
General
-
Target
AutoupdateTop.exe
-
Size
166KB
-
MD5
2079ecbdd8f54ff8cd2b775fab3c526d
-
SHA1
50c0d051c322fbf3366d0f4bd306e5c12a898346
-
SHA256
9175731b8c37e16890d164b272460ef42a40e689e361dfe9f89ce292b930ef55
-
SHA512
cb3f051fab4bfa42b0e80c3b816b6c316fcfac2271501dc61cb92f521dd1cb0c37fa0ccc78e017edc67cb0e32cec8f86f43b4f024c5dca8452aa9d077524a57a
-
SSDEEP
3072:zk786gTs3wa4kHUgH3BZ8oMpdd+SbT8PRZ5fIwVFuGto+:6j40n8oMx+Sn853Vg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AutoupdateTop.exe
Files
-
AutoupdateTop.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ