FilesUpdater[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FilesUpdater.exe
Size

26KB
MD5

af7c8b1eb22bbc4a3326bf25de2ed9e9
SHA1

bbd59a4769548b29458fcb9f9fde583e09310af8
SHA256

6c31e5185df986ba0da33177b5c28c9ea3183c303fa3a2504ad9f09f2542aed2
SHA512

5e9e59aa9e47ebd45852e26982ea24f81e73fe272ea8e33512d61c41c3a818bb67108c9f40087868036d39843f9ab282e327e55b48c037d55bfa48c76ef2b065
SSDEEP

768:QYWmDxCvo/O/zQ3Ik7KdFmK4uY757sT7:QYWmlCvo/OzmymTuYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FilesUpdater.exe

Files

FilesUpdater.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Mrgaton\Mega\Programas\Programas de CSharp\FilesUpdater\FilesUpdater\obj\Debug\FilesUpdater.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ