Static task
static1
Behavioral task
behavioral1
Sample
ps-updater.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ps-updater.exe
Resource
win10v2004-20240426-en
General
-
Target
ps-updater.exe
-
Size
11.3MB
-
MD5
9f9c9f4dd0a867d43304e8f4a50138cc
-
SHA1
61b0df22449e796ca9a85f1c6349c838a51b7736
-
SHA256
91e363fcc36a0ea9f494966be0642d1e5bb6804bd7cb9365e518eee30542bbc6
-
SHA512
acdf4e999b6ada6aa2977da4167d12ee06c82344c265f6552b7d1ca419d479fd11c5212908645a6f23ca38f08d208fd0fab2dec6d4d2765e64aca052ae93b246
-
SSDEEP
196608:M/33cLEG9GI9Suhci2WBrtQxziPPYg5A+jRtfxronhLp64Z7mb2E8doe+qbA1nE6:M/33c/GI9Suhci2WBrtQxziPPYg5A+jP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ps-updater.exe
Files
-
ps-updater.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11.3MB - Virtual size: 11.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ