Static task
static1
General
-
Target
Update.exe
-
Size
2.5MB
-
MD5
d4e32e07a186738155edc409a55cc497
-
SHA1
4397bb6d5e4da656293274897a6746d140af98e9
-
SHA256
95e18a327395fecdd809a728b2cee97bc6770160ee6d1f7fc27e9d33925ee9df
-
SHA512
025b0c4a5fa08784dac6f92d4e736e34fcccfb2a090f6de239684fb33448df1061fb56c1d857561fd868a9334bae7f33ec5f920078b53c05621d0a75ee3a14f1
-
SSDEEP
49152:z6vewRhIuY40qnnNjJDxn0YzcenyIoZ3+:z6vewRhIuY40qnn1JlFceyI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Update.exe
Files
-
Update.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ