LHC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LHC.exe
Size

329KB
MD5

a370fdd0f9939f022fb9236c938e2f62
SHA1

878100ba55841ed65b4efbc8b587142ddfde8d3e
SHA256

524ab678a92c1cfd593fa4f7dbfe914a8d452c1da9e6dd4addca78b560f38e54
SHA512

29e35c6d3b3e05b6d35780c979d0ae740cb1876aa7dc171ae0b949648bfbf4aece3b8d937fbe926cba0e8ddbac8d0b8800e0e4db5e236aa30cbc6b3961e78eca
SSDEEP

6144:EexF3iw0qvLJXnlUGujCtjno6itQl+REw6FMG/UHQS8PUHIRA8yVYtFm6axHUBjY:D3kqjVnl36ud0zR/6CtQ9PUHIG8DnBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LHC.exe

Files

LHC.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Admin\source\repos\LHC\LHC\obj\Release\LHC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ