Static task
static1
Behavioral task
behavioral1
Sample
LiveSplit.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
LiveSplit.exe
Resource
win10v2004-20230703-en
General
-
Target
LiveSplit.exe
-
Size
416KB
-
MD5
515abb8920eb9bf4ec37a857dc6f92f7
-
SHA1
f18c724716f8e59d251222e354cfc0f14c05d6c0
-
SHA256
91618a26eb2c2c748db2d9f4246519b0cbf9d6e2c1016df4aae88fb4263ea0ca
-
SHA512
f914132c626a0ca08f11d12f5146b21c83c1cccba3225ac5c07f1de3dcdc1f28c8ede80bd0b46cdb96ed42b10fe0de7b74f4cb5f33cad0274589b4b3ddfab838
-
SSDEEP
6144:ZIrdtpCR/9Fc9zgsHL7irKVnbEVbFWXNWeuXIP1feik1QP9TDFt:2rdbSnugsCsnEMNH1fO8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LiveSplit.exe
Files
-
LiveSplit.exe.exe windows x86
Password: dsa
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ