logdefender[.]exe | Triage

Resubmissions

11/09/2024, 19:01

240911-xn8fkaxcpj 6

11/09/2024, 18:58

240911-xmt7jsxfjd 6

Sharing

Copy URL Twitter E-mail

General

Target

logdefender.exe
Size

392KB
MD5

d0f9b8ee36c4e55a72ce196f52375700
SHA1

92f40097a52d343145f0c1cdea6ff7fcd14c6b5a
SHA256

0c37ce7f67a2ad743a8a05efde22b301cb117e0a19261f3c0e31f575e7663e24
SHA512

2a30799a78bf5bec214ef2fecf8074df30d7698bf9224f68bf183ad3d9f437b800242d3c935f5d13e98b46883029a5f16cc8cd9941ce0c7724d0999e0879e6a8
SSDEEP

6144:fiDGklbq9onEmsPT0igIaQButAs0/w6TeRDH/HX6ASqv5Bc4kYNim89PA9Cv:ULv0T07ZQWTgwNDHX6ASGXc4mm8VZv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
logdefender.exe

Files

logdefender.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Rune0
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Rune1
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rune2
Size: 389KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ