Static task
static1
Behavioral task
behavioral1
Sample
Lenmark_Original PO.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Lenmark_Original PO.exe
Resource
win10v2004-20230220-en
General
-
Target
Lenmark_Original PO.exe
-
Size
7.8MB
-
MD5
0fb81935c032b41ce2a8f29e51941b40
-
SHA1
d1448770168aa6c41366cec1899e7737b889128d
-
SHA256
118f8cfcf4d2b42df08ad902bd44ab60380dad14b1847a15db61b487c286d57b
-
SHA512
0c7da1cff8f7795a3041da4085773c1a4b63ff7132831e0b7824e500a3c523e001e6bbdb5cfa7f963bcb7bd7f097c706fc5c29407cc4951523db1b53acab9b46
-
SSDEEP
49152:iFQ5CnAqBoR7Aqb1SYd+jco6VnP2K/HNvvyH8Ezggt38goKvKAd6TsQDYG3sDRyU:iRBoR7UYW2VR9GggtjE2TLtR
Malware Config
Signatures
Files
-
Lenmark_Original PO.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ