Project Ligma Executor[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Project Ligma Executor.exe
Size

15KB
MD5

500ce57e4c9b498623a19f465f2d8169
SHA1

d4c5ee98b4f94e36259e4eab29a5f26e2450ef2b
SHA256

003b32fc77fb5129c444fb3adbf2b26de82c3170793f339f1ef0914eebfaf842
SHA512

3bf202284046943df96e41b42d8b13ee2f1ebe03aa0b0f3c599ff3cfc0b4b5011172615667d0ec299410532beaeb3fc66fc6a6d088f7062ca2ae5120a749b319
SSDEEP

384:GrdKFzvOp6MlNyn+eqFIPU7vQQq7pV8kvwKwq6uUI77c:GaBn5qFcQwU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project Ligma Executor.exe

Files

Project Ligma Executor.exe
.exe windows:4 windows x86 arch:x86

Password: a

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\abqhi\source\repos\Project Ligma Executor\Project Ligma Executor\obj\Debug\Project Ligma Executor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ