Ls_MES[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ls_MES.exe
Size

3.1MB
MD5

aae41b19c1f57520b37a69fba871dec6
SHA1

3af03d786805beea890d01f0946c1d41da4a4eea
SHA256

5ad31d5dc549cc44dcfe41439549b215a876210ccdc00d0d1559a4716c840c96
SHA512

68e04b7181a0fe73e37caba04ecfba9f62be5f2fba928fd4356571cb220eeca8842f799f8168b299f2f43bd7b050aca7848b756b132fa572077713764cf2a0ae
SSDEEP

98304:uaXWU+/CdVkyvb3aoscMgCMWVTlVBfiuMe:7NSmbq1gCVllf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ls_MES.exe

Files

Ls_MES.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ