Static task
static1
Behavioral task
behavioral1
Sample
LSl71RSdKGfhuNG.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
LSl71RSdKGfhuNG.exe
Resource
win10v2004-20230220-en
General
-
Target
LSl71RSdKGfhuNG.exe
-
Size
708KB
-
MD5
495d8af23d282c25c53ac94805eedab8
-
SHA1
1a377ec0bcbe1a1ddcdffd7ede7079f38eb3e44e
-
SHA256
bb8e3470cf05d4aa4e74551b11a39436681db63206d7c1bee0ddb4bdfe99dec7
-
SHA512
4b656e18c9f5b4986c6866f51d9262b63df70e95acc8dad4f5a107bae7445fcf5b1db4e077ad2cfa0a1973ceb36d9a01c2c43cfdf1a993f8b0b66611baf41839
-
SSDEEP
12288:pfjU22n22f223229AMTihh6xhZ6Ory76iaCfBs6EqbyGkvSgoKHeWeBU2kJMMMDg:ZU22n22f223222MUgh8ywguy8sHWQMM7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LSl71RSdKGfhuNG.exe
Files
-
LSl71RSdKGfhuNG.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 690KB - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ