Totally not a lewd program![.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Totally not a lewd program!.exe
Size

4KB
MD5

3895d359dd1f6d833704d94e182b2adb
SHA1

d79765e3794d49955148581eb72f1a0a2aed11c2
SHA256

889c2aa1fec3b8b750ffde01ab42e79261bbe2409e760d4a723ff65ecfd5adff
SHA512

020e424b21c3a1d52c45667cb5fbc3ac4d5c3ba7ed11edf91f7d8b5d602f27e131fe93e8bdfd0914e3ef280ef71fac77cfb7d3f192db5d7c646a6ed6abab4810
SSDEEP

48:6x2kO8157dZNAKWKWC4JO/bAs70jX6eRBFsWUP4VGOulZGDGlcq:nk11xdZKrKDL+/mWZA8G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Totally not a lewd program!.exe

Files

Totally not a lewd program!.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ