Ls_Update[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ls_Update.exe
Size

143KB
MD5

b349295225294fb09f4b5aa04b9f9b3b
SHA1

a58c2608cc71261bb9ff8c881fcbf92c11c56a08
SHA256

3b2a3638e79fb38a8ef4c95e5ef1bc3475f7a520ae7cc1c79e2017a15daf32d5
SHA512

aca2aef0d68f6db9574b25034e6552257ce4a7d8ab3edf800c899850482a8c3c78868bc2db3c663b49c4e4c36f49e9292d971df33677de09d2cf8f605067a416
SSDEEP

384:FopoXzoCOV2efhy4ekvwKwq6uzY9OyaRt9ewrGaWp8dY9OyaRt9ewrGaWp91:FopoXzoLO46OZRt96a2vOZRt96a291

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ls_Update.exe

Files

Ls_Update.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\ERP_CS\插件库\Lskj.Update\obj\x86\Debug\Ls_Update.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ