Regentsoft[.]Tools[.]UpdateDB[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Regentsoft.Tools.UpdateDB.exe
Size

16KB
MD5

45220d61873091b938b4193bd0deb02c
SHA1

d8ae2a1333c9ab22da6ef9d498ff6c0dc6693b67
SHA256

cdb3b8ad86b7ff8accd1291df6d5b9558d382ea0c3e2d5cc4e6518d966138604
SHA512

9c2ef36fc9134effb20066f27c34fab4c784e8d393ffe58b409c5d1c551632f210cf3e833e7132139d3338a8f52f7ce474f2095bdbb9a3f19a28dad4a3aa5884
SSDEEP

384:yCmDDE4url4JpTs9Kks2l3Gdi+6fEvhKZSaDO:yel4Jpo0ksXaDO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Regentsoft.Tools.UpdateDB.exe

Files

Regentsoft.Tools.UpdateDB.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ