Update Maker[.]exe | Triage

Sharing

General

Target

Update Maker.exe
Size

373KB
MD5

02570bd3748f462a768b17fed55ab9d3
SHA1

337826a0c15a1b1663fd3ba95798abaeba53c645
SHA256

685a1038534a894b1ae77a07ac18886d419a0581e7864d8d6dba87f1c90d5ee6
SHA512

16f38450bb95ee50fb6c5d9e67dbeaf33a7a76aee17136ea7b29d7ae03baa676ff0270963133a0a703ec234719dd8bc4ab432354aa87ec25c966087db1e76bdf
SSDEEP

6144:DsPdPBxBSlA1VlVXpwwOzT9aoAsRVITb6EQjVmv7TVNXK6onQvhefhb8Zw:DAdZoAT5wHzTgoAsRVITbxQZmPVzphI9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Update Maker.exe

Files

Update Maker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\MuOnline\Soucer\Source YCR4ZY LAUNCHER by louis\GX.Builder\obj\Debug\Update Maker.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 361KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ