LIMS[.]AutoUpdate[.]1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LIMS.AutoUpdate.1.exe
Size

152KB
MD5

2e68c22d761879ed3033b8cc4f9c45f7
SHA1

2c80ca983906ef611bb8eb4a4389d5ea07a05f92
SHA256

a444e78edbe6f55f3ecf4fb5134868ac638cb3373bc0e6b312d7c9885727494b
SHA512

2e3504ca11a30789ea4c969e2200bdab3da479047c5a35a63dfd6d181164726034d8b22d4363e7a079b8e4fcd241ebb43b2b38457bd05adcf17a37ccf48e8107
SSDEEP

1536:g+f4TthrJ/89+Nn76jBwEMxqElwjuTi5b+R+Z1dpreMXWioONn+6jBNEMxqEowN:g+w3JE0N75i5b3ZDlMiBN+o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LIMS.AutoUpdate.1.exe

Files

LIMS.AutoUpdate.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\wangjx\project\.net\ZQSOMS\Client\LIMS.Autoupdate\obj\Debug\LIMS.AutoUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ