LIMS[.]AutoUpdate[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LIMS.AutoUpdate.exe
Size

152KB
MD5

2a2c63ac0c053a7ebbe5171a12c22fcb
SHA1

ae27be8c3075828f21700918ed4acbb130c17d3f
SHA256

9220f5a666f0e7a2a92c5adf23cf4f602a5181f69e42627092801ce61744b7ef
SHA512

bda3354debc3d0a9b4a61c22268726f1f2f6da3931dcb02fcad73b272ea4c60ac791fb20f97350ef9f8c03ad110996c6408efff3420c3da19f91e4f2c5cafa1c
SSDEEP

1536:k+f4TthrJ/D9+Nn76jBwEMxqElwjuTi5b+R+Z1dpreMXWi7ONn+6jBNEMxqEowN:k+w3Jb0N75i5b3ZDlMiiN+o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LIMS.AutoUpdate.exe

Files

LIMS.AutoUpdate.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\wangjx\project\.net\ZQCAMS\Client\LIMS.Autoupdate\obj\Debug\LIMS.AutoUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ