Static task
static1
Behavioral task
behavioral1
Sample
LolScriptV13.1/LolScriptV13.1/LolScript/LolScript.exe
Resource
win7-20221111-en
General
-
Target
LolScriptV13.1.rar
-
Size
24.6MB
-
MD5
5a34f26a9d49e00068104813b4c2475f
-
SHA1
25de31f845d716ddeb1498f276d873202d856a1a
-
SHA256
601b112502f810f643b1c87b245f50533b472c13d87e69c187ce46daefe63bcf
-
SHA512
63e71f9878e8e17977a917c49f27f06c4a6d7d06a698e740565d2eb19b90351066943309b43a91403fb5e2a45a3aff67a915e4744f27f0e90fae74f39e27c558
-
SSDEEP
393216:KKkDiTrj3BCbswubHx3jcRCx7z4zvPVBJdnbjPvgTgRHmNdc1CGJZk6bRVqKnz84:KKkmTnD+RCtovPjvnPTB0k/qnKIWb8Mz
Malware Config
Signatures
Files
-
LolScriptV13.1.rar.rar
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/BR.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/CN.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/DE47B.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/EL.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/ES.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/Font/HowToUse.txt
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/Font/VN.dds
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/Font/br.ttf
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/Font/en.ttf
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/Font/kr.otf
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/Font/sc.otf
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/Font/tr.ttf
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/GR.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/KR.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/PL.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/RU.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/TUR.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/TW.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/6TCB3OV90/VN.ini
-
LolScriptV13.1/LolScriptV13.1/LolScript/Installation Help.txt
-
LolScriptV13.1/LolScriptV13.1/LolScript/LolScript.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 83KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 8KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2.9MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 11.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 8.0MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ