Lskj[.]Workflow[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lskj.Workflow.exe
Size

305KB
MD5

4aec40be4ed518ea69274406d2026f88
SHA1

8844c4f504251a1a2c7814e7b2fbb00901411b93
SHA256

b3066633a62d9a5da5f3e017c0ab00dc2e373c36c51f57f5dd26504b7844d470
SHA512

3fbfc0428acb2ac419324640c8588c8cf7aa626d7fe0e7850f105870bcb3629b884cdb6e0792dc48490e9d22bef4eabd23df4e9a053f023f582085c38d712414
SSDEEP

3072:73yqTHkIqxDTW5WMtLknFXY45iD/Wm5m5mvZ9we3Ec3z6ly6cRAbszP2k3z6l:0jSkn5iXnv0jc+qWsj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lskj.Workflow.exe

Files

Lskj.Workflow.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ