Lupas Rename 2000 v5[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lupas Rename 2000 v5.exe
Size

742KB
MD5

18760f5f11d48c235c9861155a43e8cb
SHA1

a4c4cc8b3059af5058a41fe1b8c9613872ca71ae
SHA256

40ad7ebd8b39aa0a0f6f2acbdb1cc7b39b62b522ac3efde9ec0661168a5bfeda
SHA512

74be5314458ea18b82997d16ca1602e54304d533ef4578c5c8a7b757d6865864d34f5d05e8042f8b85f64cfb464c55d4833f65c630e3e6d5cdde0f64b9fcf4da
SSDEEP

12288:KYk5CUsmSR5L5GCEZ94rnGYYuk7nlNTyeoJ/32wSz9qQW2Z38jL2IhUliwOmjb+X:/EsXL5S+mlBPtwc/3C7Lmjb+X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lupas Rename 2000 v5.exe

Files

Lupas Rename 2000 v5.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ