D:\Jenkins\workspace\LS_ID_BUILD_UPDATE(2023.10.25)\src\LSClient\Ship_ID\LostSaga.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dcb14eb3a3fdca36a05030226e75b1be1a2ef31f846e96349e57237bdea5556f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcb14eb3a3fdca36a05030226e75b1be1a2ef31f846e96349e57237bdea5556f.exe
Resource
win10v2004-20240802-en
General
-
Target
dcb14eb3a3fdca36a05030226e75b1be1a2ef31f846e96349e57237bdea5556f
-
Size
11.8MB
-
MD5
4323660738315519dc8f57ff3b22244f
-
SHA1
26b4419ff1d18791138d7693b88d25c90e6bbb8f
-
SHA256
dcb14eb3a3fdca36a05030226e75b1be1a2ef31f846e96349e57237bdea5556f
-
SHA512
62c3559e3fd746796f403af2b5b2f34ab56e6d044b4cdfcde8a0cf69999654c8b3fd6db1a4a2db8fc8299b4dcf731a7b51d18c95aa2afc8d6a295fb0e5dc9e77
-
SSDEEP
196608:Pv1pJjeDM+SF29vHKhxShvFNtbLYJ5wLwjN55MuXPu8PqzDcgL:zwjSFeqh4dtfAMwpHXxqz3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcb14eb3a3fdca36a05030226e75b1be1a2ef31f846e96349e57237bdea5556f
Files
-
dcb14eb3a3fdca36a05030226e75b1be1a2ef31f846e96349e57237bdea5556f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Exports
Exports
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Sections
Size: 7.7MB - Virtual size: 32.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 562KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 43KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 189KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vm_sec Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ