Lobotomz[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lobotomz.exe
Size

438KB
MD5

defa788e5e63fdff04dfd4a8e81a69e5
SHA1

75f7baac994a08859350a66647c5c767dedd3fd3
SHA256

15dc4608f9e0efcf9d68524b17795fb6d168ece72a624ec5a32b227fc12e079f
SHA512

cbc0a489e5809667f7c2b3cb6cab2afd930e55490d98f60e960fa34e52d35fa42d902184c4c9b055d14a75a39052ad0a7774cee2a5b0c2e34a68c027f44c861e
SSDEEP

1536:qZ2yWbb/OwHQGMoivnfOv7SzMFEIePmtu/Et7v1tEYMHGWpUrrWoOTJfuVmyLUQZ:qIykb/vxeeMstW4rqDu7qY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lobotomz.exe

Files

Lobotomz.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\stepa\Source\Repos\Lobotomz\obj\Debug\Lobotomz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ