KlPP.pdb
Static task
static1
Behavioral task
behavioral1
Sample
LR_Marine_Customer-Invoice_620-126427-20240423_074041UTC.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
LR_Marine_Customer-Invoice_620-126427-20240423_074041UTC.exe
Resource
win10v2004-20240419-en
General
-
Target
3ba43a11e0f36c965a972ef7e533ced0e9a4498d07e269fbd905e5cb3a35d663
-
Size
680KB
-
MD5
9d972ec92ddaca48a02cecbc01b949e8
-
SHA1
469e1c4ade907be43d00f7a4b84fe72dc791cee4
-
SHA256
3ba43a11e0f36c965a972ef7e533ced0e9a4498d07e269fbd905e5cb3a35d663
-
SHA512
85317b92840c00464ff5ab75f9cbf8ca27b6f6d3413973fdccfa71ef7345ec0b833798d28a6c7f4319da68cbe8b74ebdcbca95ba4ec55443e1b101df7864ce98
-
SSDEEP
12288:0XkzkZJFPVsmIFy9UiUxkGXhVrXKQ3WOzdJc/yqBzmDSxphU0EuOEwuCQ1WB:07JFP9Iw9akehxXK72noywzm+Th5rbCF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/LR_Marine_Customer-Invoice_620-126427-20240423_074041UTC.exe
Files
-
3ba43a11e0f36c965a972ef7e533ced0e9a4498d07e269fbd905e5cb3a35d663.zip
-
LR_Marine_Customer-Invoice_620-126427-20240423_074041UTC.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 695KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ