lox[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

lox.exe
Size

107KB
MD5

6fea2b68f4c6c4c8ea4a92a2bf205cee
SHA1

b7688a0157f8c0e1ff3b969724a70e4c4f94938d
SHA256

2717889781bdb80aac3ac489d5d3f5599f4fa8ef2f0382a544e096f5b1f117c1
SHA512

1fbd1ffb2a121c2def159124b129df424d4dabc85bb2cd2aef008a24e7b4296a98ba3f8ed39cc05ee451f6d0aa45200e7d2827d527ebc9072219b1dda3c16b61
SSDEEP

1536:OAGGCnzjUBve2+s3P1FrhMGW8F7e3KTGDPvWX+N4h8quI23AO9bcVXGaiEvVZ:OAgjUBvltXMg7eJZmxE9bcQ49Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lox.exe

Files

lox.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

s=R{
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ABD25FE9
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ