UpdateApp[.]exe | Triage

Sharing

General

Target

UpdateApp.exe
Size

506KB
MD5

7561aa2a2de0e75cf8efe135ce627826
SHA1

b441a61727e77498a207ec2dbf0ddbaab149602f
SHA256

4559c005981b3f440b3bf36ec832571f85ce832b26adc6d469899ab28159762f
SHA512

9c5a93f025c28113f0c573fa520b132ae75f17fbaf56d4418e761921fbf8899f40247a7981d7327ef966c9b2bae5b6a7f294ff8fcd5a41b099b9343d2a18b6aa
SSDEEP

12288:3USXlIisU97k85GjXlIisU97k85G7XlIisU9pk85rX:EilIytkQelIytkQ8lIyTkQz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UpdateApp.exe

Files

UpdateApp.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 343KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ