LsCallLibrary[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LsCallLibrary.exe
Size

14KB
MD5

c84266a30c562296d91b012e3a2ccb4d
SHA1

baf87795da8341659223c10179e7a0952d5f7de5
SHA256

4794f9afaaf74e1bef337e180e7d1c2b1b46e5034dbce33ac31cdd600550a4a2
SHA512

a525f41e7816b8c9a0039441bb920c5876836f484ddc59d891c32d0a440c9d8bef38937ba02882e5997baac0ef6e73cb8a77c7130f5ee0e7476728d1c7ac1ba9
SSDEEP

192:rS5IzKuzpS7iswlXaidG1nyMbu/ncmzP+wDyIYo4NkJuzGl+uCDGXf5WQx:qMS2swlXb6nyMbu/1bbuIYct+uvf5WQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LsCallLibrary.exe

Files

LsCallLibrary.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ