updater[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

updater.exe
Size

12KB
MD5

37b8c8f0ee4d6ccc3be91becda803c53
SHA1

4c7f461c5935b50b6d8412fc2dda9d361031c3ba
SHA256

4f953cb2b47a8cd44c077c80e145fe59161815bda879984e321629a2fc0c87fa
SHA512

f5f7e0c81ea2f24338bb262b359233df6ba906195c14a13415c2d306545aa90fedce51ccfa2ac9357cbb96afe818988709511b25ef2cbaac32357ab41b130408
SSDEEP

192:cPrhGoPHBgbhQ+Z06EwOmPNGfVslg1tYHFUs8JYT:cP8oJWW16omlGtMg1uldh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
updater.exe

Files

updater.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.coin
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ