1_LukBT_module_encryptor[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1_LukBT_module_encryptor.exe
Size

52KB
MD5

4d05d4b28f54a4f407f50a4fa3297c3f
SHA1

7454320ce32651de0d268389709d6cc03efd7ebb
SHA256

206e71939ac01a149d2fcec629758524a2597bd7d07e6bb3fb01d0f4e28f5b8e
SHA512

fb192f446af931d7c1ce44e4b572296fcbda0c883fd99e4ce68f9e07a8535546cb14acb72aa42169117d0ed7237729d9282fc28f1f75cfad333df45aa7f28efb
SSDEEP

768:XyqQm0gJponj6q+QLce8RdFhp513WAK5YFspBsEWUY070AUHZZaF4GlINb6oYfKl:XlJanWq4eOh9PuHWK0AVNeNb6vmwVcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1_LukBT_module_encryptor.exe

Files

1_LukBT_module_encryptor.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ