Lazerus Executor[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lazerus Executor.exe
Size

158KB
MD5

aa60bd54b911ba05c57c68e8ca6e124e
SHA1

82633a6ca61853ce36ef808f19768a9784b38bc6
SHA256

09ff3efebaf8f47443c1241568402edeb2dce2c4e13443070df0feae529d2fdf
SHA512

d49d0a5d95ed96c343fd0d5da8e7a1dcacfb4bda6f2b77693a023246834f374e2ae902bf218ade1ff2f5d70ebd93371a7e06c4f13cb9524b5e918a4e638c4bce
SSDEEP

1536:MBKvOcUi/hkA3uRTaQED2cl7zNtQSEzJcwdWv8ELm0HIEmBg9s:MBKvOcUiacuQDdfhEzJdlqmcEBes

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lazerus Executor.exe

Files

Lazerus Executor.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ladro\Downloads\d37551e5c7f50a51e879019ce518a060\Lazerus Executor\Lazerus Executor\obj\x64\Release\Lazerus Executor.pdb

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ