LPO-2024-357[.]rar | Triage

Sharing

General

Target

LPO-2024-357.rar
Size

596KB
MD5

72ecb7f78c3c2d8ef9c3c47fa9a2f42f
SHA1

22dbe091999b28f3622e3026235543de65e1c86e
SHA256

2ade1b23feab6829b32b569b6101dbee9966a78a967051b2e1f64d36b74bc49a
SHA512

744261bd6b733aeec9f19facce717d59fb61178c8cc9acf9a5f643e35fa5e7076cb71627730eae64e229c4cba2a7cd2b601ec0b0fc21f42e72add67405edc312
SSDEEP

12288:TFrO/VYbVIpc6FbcW1h+SPBuGTHyO54Fx3CjYznuenTUbqsAtZ4fUlTuEd4Pyw:TFEVMqpnoyh+8VyByjToQd2Z4fST5syw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/LPO-2024-357.exe

Files

LPO-2024-357.rar
.rar
LPO-2024-357.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

htrC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ