3139e82989d25d23a0a4e4543411edb7 | Triage

Sharing

General

Target

3139e82989d25d23a0a4e4543411edb7
Size

21KB
MD5

3139e82989d25d23a0a4e4543411edb7
SHA1

559ba2070e65dead5355ede503f9f3bfd477c800
SHA256

d4804ed16665e04c7a3712a48f8740f8128c5fa89d8ad06a07fe1f3e755cb7a9
SHA512

f34026464792bc9b6ac54293f9481d8456e25f0f593c724e35fe2b90656cd15b306bd6f8ef360c7d6568b0d92ff83d265cc7cc104560ae8fd99c3ceec8091c79
SSDEEP

384:bJBoH5OF7nWtQOiYcyc5RLwFZWRoJnzbXXYOhZ8vQaazLHCnrFG:9BKOF7nWiVDymS7WipzrXnTVaAzaG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Update-KB7359-x86.exe

Files

3139e82989d25d23a0a4e4543411edb7
.eml
!!KV!!.txt
Update-KB7359-x86.exe
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
email-plain-1.txt