Windows Update Manager[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Windows Update Manager.exe
Size

12KB
MD5

bf7759fd905da33ea1632ad6db4832c1
SHA1

5b0649072d082d6b9310ffe84484ef201b5abd0a
SHA256

58827abb1b6895f7bd874ff838d383fa04061ca4252a5d13517293e0e9560d78
SHA512

81f89e25a5d918b51b930151a57d798c0d3769b95f8ab58b89a0a1c911f827a6f76acb34ccf777eea0d18d9437f0692cc6fccc9d5fdbce11c60e01bf3fcaf6cb
SSDEEP

192:qEdhh6ua4f5R6O2YJLHFy71LbDVXqBWL3HwEFWbBqN8VKviZfhit8:prh6Gfj6hmLE71XDNqBWL3HwE98VZZfM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Windows Update Manager.exe

Files

Windows Update Manager.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ