lastline-demo-sample[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

lastline-demo-sample.exe
Size

203KB
MD5

dd0af53fec2267757cd90d633acd549a
SHA1

fb3f91fe9518d2941ef5416cc8e917e3a30270cf
SHA256

8f17b652fe2d02de67c945e9358705178eacdf2b62ea8317ce8ec9219c4d38bd
SHA512

ced04e681c49f3ffb70535b6b14a2b770e18fca9a610790db2c400663b1c6283a38173f1490f22c718f33cb673025bb7a397025c7b9c432a044a43d0312fb8fc
SSDEEP

6144:Mi+wpLFTHRM3EPG/Gimw+yw3dNt9TuOCCO/cgiuFo78JEfYsruHmPWNmOOCTSEP6:7+wpLxHRMSGIZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lastline-demo-sample.exe

Files

lastline-demo-sample.exe
.exe windows:4 windows x86 arch:x86

bd426f9d59d7881257747815d66a6116

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateProcessA
CreateRemoteThread
CreateSemaphoreA
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FormatMessageA
GetComputerNameA
GetCurrentThreadId
GetExitCodeThread
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemTime
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LocalFree
MultiByteToWideChar
OpenProcess
Process32First
Process32Next
ReadFile
ReleaseSemaphore
SetFileAttributesA
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAllocEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
WriteProcessMemory

msvcrt

__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
_strnicmp
abort
atexit
exit
fprintf
fputc
fputs
free
fwrite
getenv
localeconv
malloc
memchr
memcpy
memmove
memset
printf
puts
realloc
signal
sscanf
strcat
strchr
strcmp
strcpy
strlen
strstr
wcslen

user32

FindWindowA
GetWindowThreadProcessId

wininet

HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetQueryDataAvailable
InternetReadFile

ws2_32

WSAStartup

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 32B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 512B - Virtual size: 102B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/35
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/47
Size: 1024B - Virtual size: 556B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 512B - Virtual size: 490B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 512B - Virtual size: 220B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/86
Size: 512B - Virtual size: 16B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 1024B - Virtual size: 548B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/108
Size: 512B - Virtual size: 24B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd426f9d59d7881257747815d66a6116

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

wininet

ws2_32

Sections

.text Size: 78KB - Virtual size: 78KB

.data Size: 16KB - Virtual size: 16KB

.rdata Size: 10KB - Virtual size: 10KB

.bss Size: - Virtual size: 2KB

.idata Size: 3KB - Virtual size: 2KB

/4 Size: 512B - Virtual size: 32B

/19 Size: 512B - Virtual size: 102B

/35 Size: 2KB - Virtual size: 2KB

/47 Size: 1024B - Virtual size: 556B

/61 Size: 512B - Virtual size: 490B

/73 Size: 512B - Virtual size: 220B

/86 Size: 512B - Virtual size: 16B

/97 Size: 1024B - Virtual size: 548B

/108 Size: 512B - Virtual size: 24B

.text
Size: 78KB - Virtual size: 78KB

.data
Size: 16KB - Virtual size: 16KB

.rdata
Size: 10KB - Virtual size: 10KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 3KB - Virtual size: 2KB

/4
Size: 512B - Virtual size: 32B

/19
Size: 512B - Virtual size: 102B

/35
Size: 2KB - Virtual size: 2KB

/47
Size: 1024B - Virtual size: 556B

/61
Size: 512B - Virtual size: 490B

/73
Size: 512B - Virtual size: 220B

/86
Size: 512B - Virtual size: 16B

/97
Size: 1024B - Virtual size: 548B

/108
Size: 512B - Virtual size: 24B