Updater[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Updater.exe
Size

360KB
MD5

ef7112b7a8b4ed532dada460e46b6c4f
SHA1

669d080154b0c33c15b041f983c741aff79f538d
SHA256

b12fd62cdd28af3db7727434fe31b79725295a34c1fa97b000c8089d61240aae
SHA512

90e0e58848efb572fea1652edb132a3daaa78eb407df763a840c8d654e4cce7e06956defdffec7acb7c30e0fd911ed4b38ab50da91890c7c39f645c96c79e25c
SSDEEP

6144:CvKVrB9G6ck7MXl2tiH8DAxRoKe28toKeT:pK6cV0tiH+AxRWrtW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Updater.exe

Files

Updater.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\source\repos\sfvip player\SFVipUpdater\obj\x64\Release\Updater.pdb

Sections

.text
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ