Lobotomz[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lobotomz.exe
Size

438KB
MD5

50839840f4090269d00195dcfbd2bcad
SHA1

97ced23f80c1657f6eca874abbe5bb41b7a93671
SHA256

0218a7838be25852a20b84fa601c964f276b71b72d69bf74e59da19adacfbbc5
SHA512

53352a1ffa120f02fad8f037bc6fadf95b1b3f6b145b57904e0d57a0c62459326c587fbb5d2c570976ee6f290ca3da5e844c446fbbe30ba64b74f43ccfb5d975
SSDEEP

1536:MJjb9OwHQGMoivnfOv7SzMFEIePmtu/Et7v1tEYMHGWpUrrWoOTJfuVmyLUQ7wVY:4jb9vxeeMstW4rqDu7qY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lobotomz.exe

Files

Lobotomz.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\stepa\Source\Repos\Lobotomz\obj\Debug\Lobotomz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ