Erp7[.]Share[.]DBsUpdate[.]exe | Triage

Sharing

General

Target

Erp7.Share.DBsUpdate.exe
Size

172KB
MD5

cd80417bef0a2fc1dd0a11f3fab3de85
SHA1

0b655559437524a3fbdd101652148761fac389b3
SHA256

75f891eb013ecc8d3c62f7addf6892cea0c22807f4e5d1bb1d14d18f4aa49cc1
SHA512

fc5c5421481f87915e97507412d344e9b0f7740f10b7adb8a841f3705366e665d1d11be76d69db394e5e9da32f5ac8bc8e4bc56a8435082666d9a43d2d3fceaa
SSDEEP

1536:vXyBQx0i/S+xj2ZiDgwzW2ZCRlAGyQgUgFgub1JQtKNEZQte4BRqx+y4YT:vXyqx0i/S+xj24DOMBI+y4YT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Erp7.Share.DBsUpdate.exe

Files

Erp7.Share.DBsUpdate.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ