LighterRansom-ptk[.]exe | Triage

Sharing

General

Target

LighterRansom-ptk.exe
Size

2.5MB
MD5

5e5008ddfaf58b579cf7c5c03bc8b706
SHA1

9b7b34446d23dc545fcfcc5b0a26c80380d11ac6
SHA256

5bfefed60f8a46d3db6c7d93bb98160612a0273e18137239ff32f44d7926d1d7
SHA512

88ec945ae91d0f0b8f23a3e5b1235bf2b9fb0c149394a19888c52c8498e870f0fb10d2daa079742a8a884fc613d4d31dfff7a8578617be34a6c34825516bcb53
SSDEEP

49152:k9ps42b9psSD7niuEW9Sixrld9jyXONLcVccPiGjl2:k7rQ7BHniJLixrldV3NLefaG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LighterRansom-ptk.exe

Files

LighterRansom-ptk.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ