Static task
static1
Behavioral task
behavioral1
Sample
appFile.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
appFile.exe
Resource
win10v2004-20241007-en
General
-
Target
process lasso pro key gen2.7z
-
Size
25.2MB
-
MD5
e07fb6968064fdd2bbc47df649bca45f
-
SHA1
1ed6ee0f2b284dd4722fa7e37a61beef1056c390
-
SHA256
0503d22ca4abd5f97a74fd4d2b68feb8bb35f9b00ef4c93f17ef38a54c2a6219
-
SHA512
9f1d7d8dbec85f3c17a040882e5d0e04bf94b44101a9e49285d17b094cf912ed421fd87fa3e48146a4b8c44687081e9e65f0a8027accdb873c7325bd7df3af1a
-
SSDEEP
786432:6BMs2WNYMAQVoHy1XV5p+iZCVdRG22PxRcq8cu:6BX2WNnjcyxfPxRcq5u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/appFile.exe
Files
-
process lasso pro key gen2.7z.7z
Password: 3685
-
appFile.exe.exe windows:6 windows x86 arch:x86
Password: 3685
f33a57284848065dcc17357bb8e3efab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
advapi32
CryptEncrypt
shell32
ShellExecuteA
crypt32
CertGetCertificateChain
wldap32
ord46
normaliz
IdnToAscii
ws2_32
getaddrinfo
bcrypt
BCryptGenRandom
Sections
.text Size: - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp¨ž Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp¨ž Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp¨ž Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ