Stardock Products Patch v1[.]2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Stardock Products Patch v1.2.exe
Size

34.9MB
MD5

2b4ac8d136e145f53a78f4db1fd6859c
SHA1

0613b83a83171a1abd8c276654a30701a9681b38
SHA256

4fc131e7e8abb71c69b895a2d72aa9c1209f7e411924e815214dba2797aa1a65
SHA512

08f8e0c79afd65b2809c2a624d30a315bfa40d4e4ba03a135cc8e60d2d8da41f613627078d6da43e561d85fc10c12573dd86e543a09e364310a5406c6ca53af9
SSDEEP

786432:Ppwu9GmuZO5vBEsUsYby2x6FPenfQV/XKVfGUcGu+K5lMKvA6lmlQ:h/9GXZk2sUsW6FPefQVCFGLlMsA6r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Stardock Products Patch v1.2.exe

Files

Stardock Products Patch v1.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34.9MB - Virtual size: 34.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ