Static task
static1
Behavioral task
behavioral1
Sample
update.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
update.exe
Resource
win10v2004-20230220-en
General
-
Target
update.exe
-
Size
14KB
-
MD5
11a3fdbe47b0f26aaa92583c37de6299
-
SHA1
e87b59ab18b8a41a8ee3a95815da90f5732d36d3
-
SHA256
6e2ed3292afd2a5f107419548c90b5325379375beacebae5beb29258830f11f3
-
SHA512
2d8fd9aa56849b9cff6da66ab5cedaf486c2e4c25553825b10532cc9a54487cda1bd4ff7b65b01c962ab530c2bad9d2fa268c2f790f5e5ccaf1ec7fd3dd4b966
-
SSDEEP
192:jbkkWJsAnJsAs1LavX1lA7Sgola1Sypel4Cubdpnt8fIurmmaHSOP2Eg/968gpAL:3Is6sxu+oQ1HVb1GNmmIn+/Jpqgq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource update.exe
Files
-
update.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ