AutoUpdate[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AutoUpdate.exe
Size

521KB
MD5

d3ac8a5fd2a840a6727d9c359fb5f19c
SHA1

567acca7c23d63a2a2805c34beab4351526e715f
SHA256

4facdbd5dca6d9c5c103c4fd352c73a602f40d757d3da1cfdf697740fc41d435
SHA512

dea3e1082315efb2616618060107e1e6ba1829e6713183fc551b39dffcc8d563c461459730b8fce50d31166e72fb05aebad3c5af1ef7b0be05ed024c16569222
SSDEEP

12288:Jdk6OlhmEiRNoZKPEH4hRR0yVm84wjl8LkTk2LsHFnVUE:JdalhxiRqwEH4zm84wjl8LTzlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AutoUpdate.exe

Files

AutoUpdate.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.'WU
Size: - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.G,#
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.z$#
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ