HEUR-Trojan-Spy[.]Win32[.]Larby[.]gen-b0ccdc361180712a49afa59b2ec75eca2c94eac89667349be9255f283aa0b0e6 | Triage

Sharing

General

Target

HEUR-Trojan-Spy.Win32.Larby.gen-b0ccdc361180712a49afa59b2ec75eca2c94eac89667349be9255f283aa0b0e6
Size

926KB
MD5

cc07a3a171e1c2bfe860e797a0bca7b2
SHA1

5f2a2e9bc930b98c6f4d7cf8af133aa34f12d7f3
SHA256

b0ccdc361180712a49afa59b2ec75eca2c94eac89667349be9255f283aa0b0e6
SHA512

6432c7bc6c1744c9ee46e26e77c1cf5556de800d315f67f91b9f3f07cb399a45bc1a168b1510df79ad30983e7f1fb724c2eb821764f91c7748e119db80b3ee0c
SSDEEP

24576:jAFjjF2hCz1K0fbK+5S6n/J2S+W36mDtZL3h87e:0FjjF2czl7MULRtZe7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan-Spy.Win32.Larby.gen-b0ccdc361180712a49afa59b2ec75eca2c94eac89667349be9255f283aa0b0e6

Files

HEUR-Trojan-Spy.Win32.Larby.gen-b0ccdc361180712a49afa59b2ec75eca2c94eac89667349be9255f283aa0b0e6
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 798KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NewIT
Size: 512B - Virtual size: 101B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE