Update[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Update.exe
Size

320KB
MD5

837ccac57b15ea0183991de87f5d32b6
SHA1

045bba863bec427aa85ffea074b5731fdfa9a74f
SHA256

bd5216d6a91b72d2f6394e4156bbd337680d73cdc94f0c4c22e8d5c44d95f970
SHA512

53bb58892c9495ca2c63f6082a2485bf697840ed855bfef8003f62b6711fd98bf6073d3ba0ccec589311a0a214693d5da03dfc72cabb4d5323b1faeea794f5d4
SSDEEP

1536:FiY0TyibWhkU57lLOd0K+5sF8gAbL6kYUpp65B:FiY0nqp5RK+hTbL6QvSB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Update.exe

Files

Update.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ