Update[.]exe | Triage

Sharing

General

Target

Update.exe
Size

836KB
MD5

fcd8abf4a09bc3b43ffa2db133e245f6
SHA1

4c756dd99264266a61f00a8f094855c09416662c
SHA256

cac68a6ebf2e54e83eaed4f71baafb168aa25ad42e42d7da2bd36f1fd10937b1
SHA512

725cdb74cd9c9c0e2f904814a57623b4df7da214544ca6048a8117a85ffa7f519a8af20999ef3671ef2564d92c3869c3451c41d5491f7a6472896abcb4cbdb42
SSDEEP

12288:YI+0UnNA2JVRw+CQHNBwb7cTzO4lDoS3NL7FoPPc22nZU6NoMls:Vd+e2zRlLtB67c3mWNL7FqZJQs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Update.exe

Files

Update.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ