ud_updated[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ud_updated.exe
Size

2.4MB
MD5

0e16238bbe6bc5a6aea6c75e3554bcfb
SHA1

c3f7ce58f83127427351c64e5bf9f5d2c55bab54
SHA256

5c0835a4a50893ff68ba9a8a342f6789f8c74a5b7d410ad87a3e22e6399819e7
SHA512

e67304a714e356742cb37896df17b0da499b057bde8365d4df85a7678b74055c4fa11614fbfd1ca3b68a735cb99fa2147123c5805362c838bd34422c50605bea
SSDEEP

49152:cKauZc22pNSE3ly5tna9zuR24V+pkZy+anHN/p6t2MbG+Uw:cKauZup9M5ta0xVEkU1HWtvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ud_updated.exe

Files

ud_updated.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ