izLt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2d12b219413e2afcffdaf0c87b24a862f3895f1df8e4a1501a6c1ca1891ee8b8.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2d12b219413e2afcffdaf0c87b24a862f3895f1df8e4a1501a6c1ca1891ee8b8.exe
Resource
win10v2004-20240226-en
General
-
Target
2d12b219413e2afcffdaf0c87b24a862f3895f1df8e4a1501a6c1ca1891ee8b8
-
Size
708KB
-
MD5
42424af49b06793b3ff6b9fb1c76b1cc
-
SHA1
ae74152bb94f369271a19173131273d49989c289
-
SHA256
2d12b219413e2afcffdaf0c87b24a862f3895f1df8e4a1501a6c1ca1891ee8b8
-
SHA512
5151d7c611615f0f40824ba9e84b7778f8eeb788781be30a493ac5e7a0cfdd392b7cb8629b7e27e74041eada71af4099dcfe250c8186d083b2f63eff4dea20bb
-
SSDEEP
12288:iHwg8qJCKCjqHL/EOfA2+xYEuWH5vTuxCmBAklXoQfZp6SXrZfpfkesqSv:KDI2Tf1bEDZv/oXoQhp6sn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2d12b219413e2afcffdaf0c87b24a862f3895f1df8e4a1501a6c1ca1891ee8b8
Files
-
2d12b219413e2afcffdaf0c87b24a862f3895f1df8e4a1501a6c1ca1891ee8b8.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 705KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ