LimeDownloader v4[.]2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LimeDownloader v4.2.exe
Size

133KB
MD5

d14e427895a13d89f0ec94793a0de8f1
SHA1

12bb251f8186c5b5e4b2ad0451ce4fdb598f6e7a
SHA256

c68979e9956a28ba9cc83eca75128eae51809f292d59d58e09e782ea6b30f283
SHA512

68b33946379614b6c7be9ff3cf06edcaf4bcb8969ab81651713f65c1a111a3280fb944e9e8b5d05bca284bb03c113903c59680ccb7d354c8b9cbb5272b717d58
SSDEEP

3072:3CUvp8Sn8Ul76fv9uSjRA8U776fO9uSTRAY:3Pb8Ul76n9uStzU776W9uSd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LimeDownloader v4.2.exe

Files

LimeDownloader v4.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\NYAN\Desktop\Lime-Downloader-master\LimeDownloader\obj\Release\LimeDownloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ