LHC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LHC.exe
Size

331KB
MD5

71b5ef08a2eebc3846f30cee1084e718
SHA1

121a4b6b81ac1054aba6d649cef5a5a7ec9390dc
SHA256

045efe2f47e703c53be80b2a5d466dc329bcfb84a30e7d07d36571d7040ee86f
SHA512

2cd5d185b811a97bc03d809d151949b4f600f985e9e61b45466290090bafecfdb1f94d16d26321aca1f7848bc82835a82cd6d1226f7f52d76b35628fde254853
SSDEEP

6144:OJxF3iw0qvLJXnlUGujCtjno6itQl+REw6FMG/UHQS8PUHIRA8yVYtFm6axHUBg8:Q3kqjVnl36ud0zR/6CtQ9PUHIG8DnBg/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LHC.exe

Files

LHC.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ