upd_5760999[.]exe | Triage

Sharing

General

Target

upd_5760999.exe
Size

106KB
MD5

e13a57d65d2a64e971de7cfc3f6487bc
SHA1

8db4c806760027c9bad900351904704a7de44702
SHA256

c51feb4da8a35740590c09e8882e783232d3a623ce8c1b8966175c77cafaee5b
SHA512

e4edad1797634c966b90d78b41b6d1ef66f9206e57691b9d03cc43b01d372820c4cb1cc004c710073e268917867cb3f8e69433c803d7d05a42cf37e8f19d390e
SSDEEP

1536:vFZbqmt37GKAqtqltO6MddWwddIYq1r+8Nyh:vPqmtrGKAvlIntddqh+Kyh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
upd_5760999.exe

Files

upd_5760999.exe
.exe windows:4 windows x64 arch:x64

9381fac21d123f58be042e824570a08a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA

msvcrt

getenv
rand
srand
time

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ