Static task
static1
Behavioral task
behavioral1
Sample
lior.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
lior.exe
Resource
win10v2004-20231023-en
General
-
Target
lior.exe.1
-
Size
904KB
-
MD5
eb9f68dab29169e2704074b03d880ff1
-
SHA1
98940e572b05a2da5e90623206f2f11812850bb3
-
SHA256
18e4a0337581bbf779ead9c00d59a59d3cf60d880d884d06c50e88d88674d013
-
SHA512
adc29ce02ac70339459a28f1fb6d38ca258e24f6dabfd72d07be3423b38514bdb3aa332858968dbd0daf0b2d4f9eed2c916422479fb3f9b70c743eb8a6023a46
-
SSDEEP
24576:Kdc8cY5G1FOPjWcjL8TxNYqEv0rODHZ/lpWUmJKfplz72e10I:K5cY56OaccTtsWIZ/GUm0fpB7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource lior.exe.1
Files
-
lior.exe.1.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 901KB - Virtual size: 901KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ