LHMIS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LHMIS.exe
Size

1.6MB
MD5

7836ad98049c934ea53e93ebc74338fe
SHA1

8018fb5a69853de6eff1d1667729bfb24a1649d9
SHA256

0751ea495719896c1d1144162d118151dfc5a746f4742242d16fba268e61740f
SHA512

829147d524f19088ea71f79dac24d93ae4382162294a9d3de746864ab5ff7f31b145b8e5a91b9643c33b7db102ab9fd159f7f81d280a1d4b894687b4daa1445b
SSDEEP

12288:Mv/eZUzIzubYnG7h9Yg8E4iweHEvqvyrCJzAurKZiLUt7FymhXUPrBiOHonxzxZl:uz1TWq+PFNOHtz1TWq+hz1TWq+g3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LHMIS.exe

Files

LHMIS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ