Lobotomz[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lobotomz.exe
Size

438KB
MD5

a1fe3e7ff53f719b8660ec1a279de0f7
SHA1

7cb6d565f2adfe2b7d5452b6213d00d3323c06de
SHA256

192ad5c4202115473ce8e7ce69c743f40f7a3298f8994c9efb48d6d0ad4b5a36
SHA512

0b0ff38556091670e3acf7fcc445e5dad5b227d5be3bf7abff83b7dbdb6e4f274268abbc5f21fad9ac3601ce853973701e4f7c24698ad3542fff507244b71557
SSDEEP

1536:wlbTOwHQGMoivnfOv7SzMFEIePmtu/Et7v1tEYMHGWpUrrWoOTJfuVmyLUQ7wVcl:wlbTvxeeMstW4rqDu7qY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lobotomz.exe

Files

Lobotomz.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\stepa\Source\Repos\Lobotomz\obj\Debug\Lobotomz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ