l_0-original[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

l_0-original.exe
Size

566KB
MD5

bad32c96a11c6580087c9e032e387e78
SHA1

b70113d6df8654c0e9b304fc46fcba23db5325a4
SHA256

7f9357d3dec6f280a73adce3472889d3ea69e1978fec4c19dfaa433e236f9d73
SHA512

83e95d67e146af2637aa708e107d86308a3a77d4d465056e14d98fe505ccc1971570a01cd472a44059b4020d62f5567a4635ed94500e6cfeebdd19976fa1d30e
SSDEEP

12288:/PsFKNccSksjPKEps/68agquxQjD2pV5tzoKl8:IpNjiEpMn5l8

Score

1^/10

Malware Config

Signatures

Files

l_0-original.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 552KB - Virtual size: 552KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ