Static task
static1
Behavioral task
behavioral1
Sample
livin.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
livin.exe
Resource
win10v2004-20220812-en
General
-
Target
livin.exe
-
Size
2.2MB
-
MD5
523c4d3c849ad71df9810658522dc104
-
SHA1
7a3d2ca547f7529a6ffd454b4c0a57b25c27eea2
-
SHA256
863020fbb0ea0c5cb3d9fe07cc1e8d3803d43c64ae1ff83dd3817441831d7029
-
SHA512
5e582caf5e97267d34c0f328eab5f9e026d747b86a76ef8ac233636d92b9df97f79c41bc418150e96499f181796cb6643ae417b946ca7af0a17e1780b8b23219
-
SSDEEP
49152:eZRgtPAuns7iBwbTw2A9XNN1YXVLCTO9Ey0XoZidanyAS9Lq5bSVuu/v4:WRgtPAan2AnHYXVmTOLioZidxbVuEv
Malware Config
Signatures
Files
-
livin.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ