Behavioral task
behavioral1
Sample
LSCHaX for 1.67 [External].exe
Resource
win10v2004-20230621-en
General
-
Target
LSCHaX for 1.67 [External] (Password=123).rar
-
Size
6KB
-
MD5
7d6a1d8aa78308651c8e2e2b2e3f8491
-
SHA1
faebf6665f66147108d264c7b4be034b1932af08
-
SHA256
458ef97a8cd1bcbc17760bed44765b5f8bddcce614725ae4e3eb3e194db72a18
-
SHA512
1c22b79f3492983c52d765e4624cfdbf12dabd66659318cde2b0e6214125022030010d0747eeb992a6304dc7c297bb29893282091ae5e85f1566fff92ad01ff0
-
SSDEEP
192:LN/Q7j0WlAoCdeD4BVOizn56WO/1rxrUptWmi:LN1zUD4j1znyrqtWmi
Malware Config
Extracted
purecrypter
http://botnetlogs.com/PureCrypter/panel/uploads/Ppnqsohgemm.mp3
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/LSCHaX for 1.67 [External].exe
Files
-
LSCHaX for 1.67 [External] (Password=123).rar.rar
Password: 123
-
LSCHaX for 1.67 [External].exe.exe windows x64
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ