processlassosetup64[.]exe | Triage

Sharing

General

Target

processlassosetup64.exe
Size

4.9MB
MD5

611e8af3116aa80fafc76d0501fd172e
SHA1

0a82193d9485da25f424c6ff28bdde597fe023a6
SHA256

8faff89242e941f569ee0852ba3463f26741d68b22627d11555b6cee5ef27676
SHA512

1ad6fa695b89e9436c3953609337adfa01f6436e3714bc9268c2a3252fb967d9916c121c611f7416d5fe265a46f5fe891f07d02a02d27a8d6664a2fc0705acb3
SSDEEP

6144:1Ss9IYGOxz2RRKOOCxU873xCswRnBOGLeQ5dBRRW6n5FkjdfJauy:t9/X12qOOCxj3x5whwQl2lauy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
processlassosetup64.exe

Files

processlassosetup64.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ