mokdo_updater[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mokdo_updater.exe
Size

311KB
MD5

251540d095e1799f1a428a8013bfe9b5
SHA1

f64452409453fa2cebbb7f4a4b34c8fe721ca9f6
SHA256

3fe1c534b6a366803a5cebbb37c9a14aea367435c00d79fe4028bad0d1d99ebf
SHA512

2a2e3c6da0ca9a072490ca90e000c72dd3de9c63449185a4ee09fd49e2347c237003ee7264e5e2641efacf55e1d4911365b7fb481fe1ff178f3f6931cb049644
SSDEEP

6144:ceWulBTb4CbG5KcxK7lpMWrGA/FbPqnT05VDvGvvc2MLa:VLTb4L5ZK7lpMWrZN+TCVDycNL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mokdo_updater.exe

Files

mokdo_updater.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ