LN[.]WeatherAnalysis[.]V2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LN.WeatherAnalysis.V2.exe
Size

68KB
MD5

c785f2eb4ef4a2ce80ad22779b1b3a13
SHA1

3a2448fd34d4f2bdc4910b3039bb2cc83853d372
SHA256

d4cbaa6e3b45856ec9e4b62ac66dfe0c9c9417db5e159067cd75e363e0081bb1
SHA512

8bc75fc07218c332d12d0a7071ef1621b5e6eba13a62e01c9cc9234d97d3a2440edc83f72f04cdec0f12db2e379174f82f4def15229384afe2ee7c7b58014430
SSDEEP

1536:jlLu3MP8b6rZdoHPNQmBpckee/zLITjxJhbBwImV4E:j9+M0b6rZyOmrbaFVw7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LN.WeatherAnalysis.V2.exe

Files

LN.WeatherAnalysis.V2.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ