L2[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

L2.exe
Size

836KB
MD5

090dbb95c1140e3b9ec7310639025bdc
SHA1

9bfe8d147dbe8d5f8c1fd7ff4523e2c0973c93f5
SHA256

e393c188cfe21a8962a959e3e055ef18b8f4d14b616ca5ad8f79a3060b1f96f6
SHA512

aa76835bd5018255615aedb962b88a9bf90ef0292b396bcf00fdb366ab6d24d4804e55d67c880f009b12066e1db8e8305468c92620bc49d5ed4ce3f1187ec7ce
SSDEEP

12288:HSUrNvhHCDoBfurZQaexCD9b7nrd+o9cXWxy8LZZZ5j:HTNvhHC0BGZexCxbHd2WA8LZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
L2.exe

Files

L2.exe
.exe windows:6 windows x86 arch:x86

9d739105ac75389543030b63dc0c09d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\git\L2\Release\L2.pdb

Imports

shell32

ShellExecuteW

vcruntime140

__current_exception
__current_exception_context
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_cexit
_controlfp_s
terminate
_exit
_initterm
exit
_c_exit
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_register_thread_local_exe_atexit_callback
_crt_atexit
_initterm_e

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

kernel32

GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
UnhandledExceptionFilter
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 827KB - Virtual size: 827KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d739105ac75389543030b63dc0c09d5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shell32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 827KB - Virtual size: 827KB

.reloc Size: 512B - Virtual size: 340B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 827KB - Virtual size: 827KB

.reloc
Size: 512B - Virtual size: 340B