Ls_Update[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ls_Update.exe
Size

143KB
MD5

0642070ccc5b86b3350006cc20724ef6
SHA1

dbe9d1b022dca07982bcdca4ab41afeedd1d97ae
SHA256

442cd0a81e2b9002056bf72e8adc5fa54ba0e64a0f84d518c63db560bbe86759
SHA512

b4f1f10542488230b47e90468a2d86021de07f31af20e0a4a48842495f7015d921e3e5669fa6f0fd680ac55ad78c5f0e86228367fcbcbac181f7dd85b2f5e069
SSDEEP

384:XopoXzoCOV2efhyFekvwKwq6uzY9OyaRt9ewrGaWp8iY9OyaRt9ewrGaWp91:XopoXzoLOF6OZRt96a2MOZRt96a291

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ls_Update.exe

Files

Ls_Update.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\ERP_CS\插件库\Lskj.Update\obj\x86\Debug\Ls_Update.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ