LcExpress[.]AutoUpdate[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LcExpress.AutoUpdate.exe
Size

120KB
MD5

4ff1431cc3dc28ad2ce6475b16cfe8d9
SHA1

b7ba321ca2211c3c066693c81503364a9a8aaad3
SHA256

37953788e4ac2730bcc647be6b00273db92e706860d121dadf8d45b5ec1d3f4a
SHA512

2f30f0fc87951d81893c7fe7b4d4ad33fe4285396a6701d770b2502497158c7a9a41823ef08afa5e675b0d5797eb038320968ea12e130ecc4600a30bc0f0333d
SSDEEP

1536:cvM+Nn76jBwEMxqElwBjLQq2AjLQq23axvwdiVfnjg290mY8huDRV5VvcS+Nn76v:cFN7Qj9hj93NoK/jp9YLRV5VvcrN7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LcExpress.AutoUpdate.exe

Files

LcExpress.AutoUpdate.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ