UpdateSetup[.]exe | Triage

Sharing

General

Target

UpdateSetup.exe
Size

30KB
MD5

2774dd94593698e130d4127b1334e57e
SHA1

d92546a047e4c6c4dba30aaa47d537aa5f112361
SHA256

b1f7560bb7b4bb2b6c451da572e44c75bc40cb891b5f18c965f642844ed0f0a5
SHA512

a7b2472038f19df297d7932b2872f31dff283a6e7e8a828d1252a2c2c3557cead7e223f8c977fcb6810e37020c49d11753ea7b1719586f7defb63536dca7bb43
SSDEEP

384:bBYCEfLEzjMVSbr8ldaDULW45nQfjAy8ieYfte2iYcMT:bBYCEfLEeyQXyY8tJiYcMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UpdateSetup.exe

Files

UpdateSetup.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ