C:\projects\llcom\llcom\obj\x64\Release\llcom.pdb
Static task
static1
Behavioral task
behavioral1
Sample
llcom.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
llcom.exe
Resource
win10v2004-20240508-en
General
-
Target
d7cdf4839bf2043163290f8260ce9e68784ae5e18e3f45ae6b68466cc9cec386
-
Size
3.1MB
-
MD5
ad770aed3ab3452c39a01c1ce5959811
-
SHA1
917f6ccb743bb030f1ded77d4795a4165ced399b
-
SHA256
d7cdf4839bf2043163290f8260ce9e68784ae5e18e3f45ae6b68466cc9cec386
-
SHA512
d1d3708266fd43e11074222078b613d7ec3348965cc5c6f532640bcffb5df717779b4f0d1d511a4a92ef9c5f073c7879e82f45ecf68f982168ff331cd523b630
-
SSDEEP
98304:3A+lH4aS+RPAhH5W8/Tffqcwqrf+vARHqwlKUkBGsDcn:3xHY+RPAyMTHqcwS5RH9IUkg8cn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/llcom.exe
Files
-
d7cdf4839bf2043163290f8260ce9e68784ae5e18e3f45ae6b68466cc9cec386.zip
-
llcom.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ