Static task
static1
Behavioral task
behavioral1
Sample
AutoUpdateLatest.NET.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
AutoUpdateLatest.NET.exe
Resource
win10v2004-20230220-en
General
-
Target
AutoUpdateLatest.NET.exe
-
Size
125KB
-
MD5
4b06d3a3e2957537b82e9d12bf3b68d9
-
SHA1
1cc62ef8c3e39842585c77169b9a891370de940f
-
SHA256
03f7e6ac8dcd5f8926856e89c8debadb92c809675aabbf9c4c1da7cfaf5078bd
-
SHA512
6ecfc28da52363d443fed2fb979b39370f5bf2e01a72232e44e53a6880f9d1ffe318baba2140d12c35075ed455bf2ab80272f74af55594bc10cb1ed3e76ad141
-
SSDEEP
1536:E9a3hKaVQx+mKOhzBVdoMKaVQxxIo51rI:/C0OFB9CxJ51rI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AutoUpdateLatest.NET.exe
Files
-
AutoUpdateLatest.NET.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ