Static task
static1
Behavioral task
behavioral1
Sample
lite.exe
Resource
win10v2004-20231023-en
General
-
Target
lite.exe
-
Size
83KB
-
MD5
c0ce85662058b2e0654234be113de866
-
SHA1
633062ba6980ba40cb74de6dbb1fa27494377461
-
SHA256
ed7101a4dfe6fe73705396fb9f63fc559a3175665a41d47e67484f39149a4eaa
-
SHA512
c32d056cc4a82a6623c2e330f4561609b56c5ac81f9a1e44cc8601a47871221d098a05a99fca38e77d1bdf5cad0ae5ffa179adeddbd5a3df372416180b9d5043
-
SSDEEP
1536:cZWStO7bVTMW6lVE7iJLwXiWBVP04X7oKN7cqHySgTBXLIE:cgSaTwPqiqV7j9ydLx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource lite.exe
Files
-
lite.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ