Ls_Update[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ls_Update.exe
Size

140KB
MD5

88f5261993272cc70f81424c6b1a35c9
SHA1

4814036850bb822a1a7219aeb7c746036fe92f9f
SHA256

c9e6192a8e87897de7032eeb017116672b50d63ab5bae153b317bc0f16e4c364
SHA512

5129ac365149aae815926271748f769d9da8474a382e7c5425e28827b4de4b1fb34aab8274b016ae4bf9ae95dc0b1a8d6ffd80d1389a5a4f2b5edd466019f28a
SSDEEP

384:lEkvwKwq6uzY9OyaRt9ewrGaWp4UYLeSd96zIGY9OyaRt9ewrGaWp:iOZRt96a2a6XIDOZRt96a2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ls_Update.exe

Files

Ls_Update.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ