Static task
static1
Behavioral task
behavioral1
Sample
Lag.Switch_[unknowncheats.me]_.exe
Resource
win10v2004-20231215-en
General
-
Target
Lag.Switch_[unknowncheats.me]_.exe
-
Size
446KB
-
MD5
3f39342ac43689a5a6b1ca294325e260
-
SHA1
b24ede662ca0b7f289004cd284cdbf923b4dbd0e
-
SHA256
e2f2bbda827babcf440e5298878d74f0427be7bb709a1e165a8e988f1646923a
-
SHA512
0fccf4f86da6a951082a54e4f0d321e53f756375bfb42cff9c1d414d0a688d9c8e960ce2ec9a4f80a3f255a00828b9d9fa2f8653517e2356126c417449896e33
-
SSDEEP
6144:gbgL9TOSzgsgGy4VxbeQlfd8kDhL9TOSzgsgGy4VxbeQlfd8kD+:VLlOga1axaQtdRLlOga1axaQtdO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Lag.Switch_[unknowncheats.me]_.exe
Files
-
Lag.Switch_[unknowncheats.me]_.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ