Static task
static1
Behavioral task
behavioral1
Sample
Ls_ERP.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Ls_ERP.exe
Resource
win10v2004-20230703-en
General
-
Target
Ls_ERP.exe
-
Size
1.0MB
-
MD5
31a43d5e8fb5e8c8ff7836c2e4bd51f5
-
SHA1
6b31e4b37df71c578d39f4e6de7154359e26e121
-
SHA256
184c8c763e1aae8b875e0eea17f940f1f3206bbca10d7423ce43a0d53ef9b9b2
-
SHA512
843772b5d4933d7489dc6c783c80556b71804a35c42f61fca966776127d3d4868e731082deaaf895965c5c0b9e23c885f7f987122130139574913656b1b0f7ec
-
SSDEEP
6144:tUovRIvLMV+i+i+i+i+j+y+i+spLcnHOEIelrBnHmDRHeOUexhFPJKZFzT4TjviQ:KA4LWOGlrBGR+b6j6FnOU/B04J8S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ls_ERP.exe
Files
-
Ls_ERP.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 975KB - Virtual size: 975KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ