lbPKooSBzcXLo6w[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

lbPKooSBzcXLo6w.exe
Size

627KB
MD5

4d5ac74ce23b9335afc1451224026849
SHA1

a0beb89a09b3d234798af1a5d9223f2cf071393e
SHA256

ee837850dfb4246058a8505ea21fed066dd768c50f08a7992a9238761d058816
SHA512

06a6c98a5b5859985384c4bb3bfbee9c82dfb22a68358495c7588e7bb9a5602b7aef6d5b49b04fc27c1808d1cf4fa4584ea20a876da5879ca3ea3fb9f7b69ce5
SSDEEP

12288:ZqUjmZFxjgPDMhVwcPFwjhxQqcUrvzJjt0jpPlP4:5jmYcVwAWnBPXnGpPlP4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lbPKooSBzcXLo6w.exe

Files

lbPKooSBzcXLo6w.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 625KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ