Ls_Update[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ls_Update.exe
Size

143KB
MD5

2cbbe0305f113154c3b06fa4d386ad81
SHA1

449b561c464a3ed2a9b56f54be1e0b7c813a7661
SHA256

d49a4e10f08f658097426c3ee6b87efa04665ad0274278ea7c9f96c332188384
SHA512

0fe00cbd6e06b5b8932fa720488b6297db6687d045792e02f812cb5189b1a6d5e9fdf956e9b02ec8a9460135c34563c7b7138547e68e1df515ce4e9eb965984f
SSDEEP

384:nuOPdxwaEXefhyVG0kvwKwq6uzY9OyaRt9ewrGaWp8yY9OyaRt9ewrGaWp91:uExApVGoOZRt96a2sOZRt96a291

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ls_Update.exe

Files

Ls_Update.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ