LonaFree[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LonaFree.exe
Size

562KB
MD5

d38aec478ab64fe530afc9c30d435dad
SHA1

307d15d578b6f9c8ec9be8d05c7dff63329fe1de
SHA256

a58abb3dee64c09aff15d29552214e3095e23d9f363e0bce5ab4fa6724c4d7d3
SHA512

878c86f52cce3e77c8acde0333fb8e663ddb02d35172308e1adb245447df1fd2cd184689cc0d18dea8de46a2b64e110eb92405f860eb3f1bdf6bdd74eb18dfa0
SSDEEP

6144:7oP9rpSiyMos/2hqOwC3WPd/fydaQFe6VlWT8b95Iu/XHB5EPcQZUE2OqbS3B9E5:EfByMB2oVC3WlyoQFPVle8AuEfpB23J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LonaFree.exe

Files

LonaFree.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 559KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ