L2 Shield[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

L2 Shield.exe
Size

354KB
MD5

4972daa44ba37b11804969d2ec61f531
SHA1

ad4a0fd6562c8f31f37cee7571f7ed04ca418a7f
SHA256

1ddd903ecc2330d0e9c83738e43ee63e71e1af190e663b4261ac204ebc6d7962
SHA512

867c56d26b008de6cde75c52eb842f10daed61dae75f1dd65c8337561b676129437b026d58fc8f8947a018149b1e160950e8b6aba6d819d24a7d2c19ff0b6331
SSDEEP

6144:dKvPv7EDWyL3Cr+z4DrG3/xwbnJtB/Ptg5UjBFiS4Y4JpImZGGz2R:kP4DFL3A+zDpKnltg5HYWXxz2R

Score

N/A

Malware Config

Signatures

Files

L2 Shield.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ