Microdeb[.]ApplicationUpdater[.]WpfMain[.]exe (1)[.]zip | Triage

Sharing

General

Target

Microdeb.ApplicationUpdater.WpfMain.exe (1).zip
Size

144KB
MD5

4b6540051053e3cb3757386502870b94
SHA1

ca563e55e7b9896a1edada1aee32bc485ab51a2d
SHA256

fa911262c7c9c1d2308cef5f5dee20f316f536229e713eba9be542137d4c20b1
SHA512

e18fa5ba2604e0f72e0bb56dc82d09d3c3c835990e9a8a191b5b7eec70dd45d7641cfbdb411fe653da2018034b8448f9654cd7ebeb4d4b5c7ac28074bbbd99cf
SSDEEP

3072:N9PM8F5ceMIvZxVcQ2qOqopa+91P1y5WQ9ra9VZYyQkDDSOSndUtR4Ke9Yzx:jcebrLopasPFQ9ra9rak1SncRpN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Microdeb.ApplicationUpdater.WpfMain.exe

Files

Microdeb.ApplicationUpdater.WpfMain.exe (1).zip
.zip

Password: infected
Microdeb.ApplicationUpdater.WpfMain.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ