update_32[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

update_32.exe
Size

15KB
MD5

3a3331e4b73341d6c20428f517dd1f01
SHA1

962f94805e7675280050e1a4d1a1c38f7b2c6106
SHA256

9aef1e64d2e5b0566a5eeebddd407429e2796a9631b97eba86b20ea42de1f1b1
SHA512

eae595d9a3649ba69ae7e25c1dcf65136c6bd76817a2fd29720c60323c8a2299e3ef30e60b903c8a8f79e9c0e8e280a7c73aeb27cf454c8f78098713db7937e1
SSDEEP

192:oxc2STo5tDTazdf/PJ4QPYui+R3hSHiyrpVYLZ+zlRZnoNg1UCS7RawWkWbu:o2NauAui+RRSHi2pmsRZXUCS9WkWbu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
update_32.exe

Files

update_32.exe
.exe windows:4 windows x86 arch:x86

Password: infected

c81e7b81d8b6c19cf957fb35d585524c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libgcc_s_dw2-1

_Unwind_Resume
__deregister_frame_info
__register_frame_info

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
remove
rename
signal
strlen
strncmp
system
vfprintf

libstdc++-6

_ZNKSt12__basic_fileIcE7is_openEv
_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNSt14basic_ifstreamIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt14basic_ifstreamIcSt11char_traitsIcEE5closeEv
_ZNSt14basic_ifstreamIcSt11char_traitsIcEEC1Ev
_ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZSt16__throw_bad_castv
_ZSt7getlineIcSt11char_traitsIcESaIcEERSt13basic_istreamIT_T0_ES7_RNSt7__cxx1112basic_stringIS4_S5_T1_EES4_
_ZdlPv
__gxx_personality_v0

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1004B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

c81e7b81d8b6c19cf957fb35d585524c

Headers

File Characteristics

Imports

libgcc_s_dw2-1

kernel32

msvcrt

libstdc++-6

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 56B

.rdata Size: 1024B - Virtual size: 760B

.eh_fram Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 1004B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 56B

.rdata
Size: 1024B - Virtual size: 760B

.eh_fram
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 1004B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B