LLRImageLogger[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LLRImageLogger.exe
Size

187KB
MD5

29624f3359c38f1d0917fa9134a1642f
SHA1

e23054b3648fb5dc535f79edd9b310cdc55a35c4
SHA256

223c72414a25b6a004428eee866d8ea6b9b2dbc1c6262dd63fc9b6ea989a8abe
SHA512

56b3875c01392fd684ec5c1161e3caeff289b02395e65277912fe29b72a683291a0cf006d1bfb4ef3fcbb95b1047953151e59db31ee8db753183108b49b9e9ad
SSDEEP

3072:PLwlWrDK/qK4DQHMpDG8KiC/lkoTc0GmOZ4QfbYl1yY2e6/aUH:zZDKyCMpK8PNcOZ4QfbK1yYca

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LLRImageLogger.exe

Files

LLRImageLogger.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

1;rWlN]
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1;rWlN]
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

iHmOJzxj
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ