D:\1XMR\LimeRAT.v0.1.9.1\LimeRAT v0.9.1\New folder (2)\NetFramework.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f3d77f926e241f50e090057f76141d62fb66637fdfda6be9d360f154bd7d619.exe
Resource
win7-20241010-en
General
-
Target
2f3d77f926e241f50e090057f76141d62fb66637fdfda6be9d360f154bd7d619.exe
-
Size
126KB
-
MD5
2dd2f138d0d9e49bacca639357af4481
-
SHA1
58c94fae547eaad0a94e0be91782eb2338f21be5
-
SHA256
2f3d77f926e241f50e090057f76141d62fb66637fdfda6be9d360f154bd7d619
-
SHA512
4ee82275fa0f9549624e8fbc1deed9e3d59b147584ebf05946bf1672a10551679427cfd67523c34343502bfae57e455ae53e321c8ce81001b930e8605a79deb8
-
SSDEEP
768:dQI4VAn8vS/r1w6A2j5CGXRFxlz+44duYW0238mB1o6GBDwGsL+8r5Li99Vq7fBm:aax/r1V/5fPW4mud02MTrl8lO9C7pm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2f3d77f926e241f50e090057f76141d62fb66637fdfda6be9d360f154bd7d619.exe
Files
-
2f3d77f926e241f50e090057f76141d62fb66637fdfda6be9d360f154bd7d619.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ