UpdaterTag[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

UpdaterTag.dll
Size

59KB
MD5

784d7865e0ed2c103250fac430b73500
SHA1

e2ca689b7a998ef1704e4f5736bc843d7d3d0d1f
SHA256

bb7cb5aea4192a035376d380682716235fdb4809d06b63b63d6d6d1061a5c231
SHA512

09a228df9520adeeab078b63fd427d29ea1cae87af748fe39c904ff2531c403628890266dc9d5d287a7c2d38eda13bcff548f1a7bfeaf924fe14f3b5a882ce78
SSDEEP

768:coWfTLO3B5YC0YbwuRPv87BZILqSdE8TWz7MUshl0r/g:sfO3orNBZdGSMLUg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UpdaterTag.dll

Files

UpdaterTag.dll
.dll windows:6 windows x64 arch:x64

db7aeb75528663639689f852fd366243

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

PeekNamedPipe
GetLastError
CreateMutexW

user32

MessageBeep
MessageBoxA

Exports

Exports

extra
follower
run
scub

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ