CreateUpdateFilesXML[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CreateUpdateFilesXML.exe
Size

13KB
MD5

eae7513835691c996cf4ca0304edd15e
SHA1

25353174f74475f52772fd13afc4c0efa572f3de
SHA256

c024934e1513d9a41447c1bbc729c0b6c8ee1e0a0ff4e5e5c32b0728dde4cc7f
SHA512

8331c2e2b2c0803cb49b202bb612cfdd6529c6b86652ba151b50e5da0207e1cf4346967c7e754a2eac6541b929c855c7237fc0902dd51e83c2892daa15227c05
SSDEEP

192:1SmbYouswTzBI3MsQnBYVoULC9MpMp93vc7wvq1eWk7:17bYoGNI6n6u9D935yeW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CreateUpdateFilesXML.exe

Files

CreateUpdateFilesXML.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ