Static task
static1
Behavioral task
behavioral1
Sample
2lz.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2lz.exe
Resource
win10v2004-20240611-en
General
-
Target
2lz.exe
-
Size
1.7MB
-
MD5
3779a3af9e5e5d5548938b6d6c943fb2
-
SHA1
f18bb4d0b4ecd6111e7fc129a6df0726198b9768
-
SHA256
39b8a86bb21301e10f08579e6695e671be34608dd6f9ec2f029731e4b120f7dd
-
SHA512
b4e073df0bb515e6346c2c000a53fbb97a1be1662070d70ca7489ee734ff3dcafb3ec790b8e552d9555c30fcfc64218c231d7bc15ff2747b8ca170099cbc5655
-
SSDEEP
49152:hK2e1KkUpOsfjUBHRemWrmzH3Uq6QmHOXvyMUgwMY:hKb1AbL0HTWib3Uq6QuMbwMY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2lz.exe
Files
-
2lz.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: 512B - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE