LightningX[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LightningX.exe
Size

284KB
MD5

d1c6d55222718ec129019f5708c594d8
SHA1

93ba042d180b2334469a5b6d27ddb321b3e37229
SHA256

14af735ab27a54fdc5757b9740bf0c2f5fa31c933eeda201a6b2e3f77110939f
SHA512

7c79211d4b1bf31ec7faafe5b273ed66e15c5262ee4fb69b1a5c9309a7aaa2cbebb630a37a8de1c14e40e3ec2c3adf09c3eb235b24550baa1a8b219bf3eded99
SSDEEP

6144:wXqJx3GO0F7z8TjKUzoll6qUOOJG5TjWUzoll7k:JJ5Gjz8T+UzolI7qTyUzolRk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LightningX.exe

Files

LightningX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ