2024-06-15_69013bb05331ef0ffa2bc5f184e94d78_lorenz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-15_69013bb05331ef0ffa2bc5f184e94d78_lorenz
Size

1.0MB
MD5

69013bb05331ef0ffa2bc5f184e94d78
SHA1

d3f3e10698df21ec8073aafa48bf4ad55df949c5
SHA256

7041d5e325733e1c10993afb8c8634d0955505008f3ab3fccfb9a1cb2c360f2c
SHA512

78d441f4ea66d4f32cc224b191dd4db4f195fafe9f67731c964300a43fa59e9caa00fa100edcd2b47495ea4ed9ffd3790b12ec4686af20f0d30035d8bbd7c427
SSDEEP

12288:geUJLOywHYPvTbjSHbngFZGfcWC+5uUCIuPS5SU9OcdBmrsyhPVI7dFCTZX5/RaJ:genyjyHkFZbC5SU9OcdKPVIJ2ZZInFL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-15_69013bb05331ef0ffa2bc5f184e94d78_lorenz

Files

2024-06-15_69013bb05331ef0ffa2bc5f184e94d78_lorenz
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 781KB - Virtual size: 781KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ