CreateUpdateFilesXML[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CreateUpdateFilesXML.exe
Size

13KB
MD5

ed8e5d38c974743a54ceeae9c3693164
SHA1

51426ddeebb1b53e30d12c60b2d9b18023da4c4e
SHA256

351441abf1541b9360e05d7bbc86649c9b2c6ddcd9c7e9afbf98c4a8d9efed05
SHA512

77dea2148654a34506d30852f929ec2f112b3c90383585d656f5425665bde9097fa50cebf6d8d243f3838b55f37207d95cdc3b44cc5dd6911439a60875a71610
SSDEEP

192:WspURTzBjV/nBYVoUJCT4YTjp9rvc7wvq1eWk7:WspuNjtn6gT5N9r5yeW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CreateUpdateFilesXML.exe

Files

CreateUpdateFilesXML.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ