lzop[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

lzop.exe
Size

112KB
MD5

bd959ee547f83a230da7d14bb16d1fcc
SHA1

2e767c3a9d627d28e7a746b832b7af7b8f79b132
SHA256

8e8609349b125c8b32dbe69fa4cf6c75d50dc3c5335fc2843656e064e318d063
SHA512

2d27530348b5119ae5e26b8c72873ce3af1ed2b7233f2f51be4aab1a5de1d23525b06dc09df9452dacacde3a4bf14b24ff8376e2ba8c2f64d8ba15fab7251252
SSDEEP

3072:UUSd3NA9RRu8DP5G5R694+dEyemYpYVpTr:U9SnRu8DRA69pEycpY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lzop.exe

Files

lzop.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ