LSPD-PC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LSPD-PC.exe
Size

914KB
MD5

fcbc7b48f85213401602d44971b7a97e
SHA1

3ebd34064d857d4da4b0c4472dfb38e10f3acb66
SHA256

d2bc954c9b3e439e18169d5c93c6109bbc6929fc64e5d99f0baf8a369f9b3e30
SHA512

4a26612852df91f5aa59e80b5817ae69e291f7f0f4037f46c813438d7315a005c48ee344d0e5594389e6676b59f4776f09c960fec00f1eca488d11981c2d4dca
SSDEEP

12288:keBkEHTcFcZ7nJkcZ7nJTcZ7nJTcZ7nJTcZ7nJkXcZ7nJZEICDfGv0ZziTaLRy97:/dzc+hdh6h6h6h+sh4rfHlzc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LSPD-PC.exe

Files

LSPD-PC.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\kyo1200\Documents\GitHub\LSPD_PC\WindowsFormsApp2\obj\Debug\LSPD-PC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 817KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ