LHC[.]ICIMS[.]DailyService[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LHC.ICIMS.DailyService.exe
Size

108KB
MD5

4bdf74def0af724d0b5c372cbd0dc1a3
SHA1

b554d916722f0de8943204d7c6d8d1b858d861e9
SHA256

3b14aca3d57b4533ba40adfa418175a006b3ca59f7d21971410c0e0fd030283d
SHA512

d3bbdc7baa5c8d3e6666421e2bc4bac5f230fe96ff83ad01301a274129391e971d48945ce310c209f007eb03ff20b01b6b5fcbf91ff26a8ff6672a0f2547785a
SSDEEP

1536:u52/CnucVy3DZLc6iwi9nsB2XPGWB23N+dgQLbXYDRnoC6YKF74jr:u5O0ucVy31L/ihyqltLbXYDRnmF74jr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LHC.ICIMS.DailyService.exe

Files

LHC.ICIMS.DailyService.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ