lc[.]exe | Triage

Sharing

General

Target

lc.exe
Size

181KB
MD5

d1e87942679b191f42694635d96b2008
SHA1

01dfdfd6b13eeae2d7715f90882ebddcaa14d7f4
SHA256

13fc8f4d7f94283d15e231d57b52e652d8d3a877b695e7cc688a735761d1459c
SHA512

f55d0f4effaefbfa82cd0356d005bd690f5485f4f70bac94ff7a5ae41fbe51185978bb34e5595a9594078c9ecbb8e705d8194146317384ae9711189f98cfc487
SSDEEP

3072:0Z8ZaTpgqCILIFgs+7UHN91xIRzUCpM69/KImQi/6ebW6kTgTWbo:BuR6kUGzUCpM69/KImQi/6ebl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lc.exe

Files

lc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ