Static task
static1
Behavioral task
behavioral1
Sample
LPO List Ordered Docx.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
LPO List Ordered Docx.exe
Resource
win10v2004-20230831-en
General
-
Target
LPO List Ordered Docx.exe
-
Size
820KB
-
MD5
1b759e914bad71e6ccb68ba41deb1332
-
SHA1
a83e54a044f40fcc4655e2fa7f5f4c083d6f5ae0
-
SHA256
bab0046715c7546a522c4899d71343d7f15e7a0c7b7fb2a34bda33b918aee294
-
SHA512
a635e3d748473be861e202b4734e5a11cacc25ad47c641893ed6ebda781075ac09a528862f45a9454e7d7e283f3d18543e01ac577a7ecc4f2d02aff481902777
-
SSDEEP
24576:BNhyHgu6K14XzdDzefkdgT7wMiuRTwgVjh+INs2g/Y:BbyAtdDzefkGfwZu5tTKY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LPO List Ordered Docx.exe
Files
-
LPO List Ordered Docx.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 818KB - Virtual size: 817KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ