Static task
static1
Behavioral task
behavioral1
Sample
LightningX.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
LightningX.exe
Resource
win10v2004-20240226-en
General
-
Target
LightningX.exe
-
Size
265KB
-
MD5
21210819b86fc46d78a7176f414c624d
-
SHA1
a141778101e6212f1fcc7199cfd14271103f4677
-
SHA256
7b6f3a2e6bb36f9d3b50005718d08a4b3a766456950cdc360313b44bd2b545e9
-
SHA512
40063fdcbd2e512c3af2e319c1db763b85de5b4283cf9738a38951480d12189fb46253f56139b17b573a60f3890d54b02e6ea6dfc288733fbcb2704b03449c92
-
SSDEEP
6144:/OvUnSTcHO2fwOTjWUsVEqDU5TjWUzoll7k:28ntCOTyUU5GTyUzolRk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LightningX.exe
Files
-
LightningX.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ