AutoUpdater[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AutoUpdater.exe
Size

411KB
MD5

54bf0e0dfc2d6ede0efa96c12faa34cb
SHA1

efa40bfcbf28dbce10efa42aadfd973aa046d5fb
SHA256

2072a549bda2c9a4fe94777f0f564a5e4aea09516dd306876401e1a5021aaca7
SHA512

ab9f05dc004d2d86c1b47e983b449762dbda363f226268ab6e6206fc33c960f31109d5ffff58db91b946047dfa5bcc25c3670bcb5820b59d7e85a92e1950771f
SSDEEP

1536:MDLZoUGd4jHOdSGrflVo0LfZ1bm+tWYKqaAFfB+L4T8:JF6jHazzVt1n0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AutoUpdater.exe

Files

AutoUpdater.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ