process_lasso_18[.]3[.]0[.]34[.]zip

resource
unpack001/Process Lasso 18.3.0.34.exe

resource	yara_rule
static1/unpack001/Process Lasso 18.3.0.34.exe	innosetup

process_lasso_18.3.0.34.zip

SHA256 b2171ed2dc6bd4d26239a10d0bdde7282ece8069176cb99723cca69890f8393a
MD5 8e401af48368f8c55c834d7e1288d8ff
SHA1 523c3e4e3265edb3b32822baf07613c62f36e672
SHA512 593c78d1c3f073ed132480529e8220d7cb2a3a75ead59d6d71fd261dee931c44d3b197ba3c65743d8e6f714ca0789b5cd170fa4bf354e5651b699669dcffe73a
SSDEEP 98304:Mi0qJHTqHlWwq1x9MgJNM3gz/UYLJjbJda:Mi0q96EL9qgLJBda
TLSH
T1A9463362A871787BF4335B719BA92082FE872348F123F55EAD7354109BD8731FAB5290
MD5 SHA1 SHA512 SSDEEP TLSH

Process Lasso 18.3.0.34.exe

SHA256 a17a72a527f3a3789d153de27232f3cbf25f6a923611d167e0f7ed757f93e1d5
MD5 3810ac63610f1b1e0fdbf1106bbd4953
SHA1 3b03a8f4ab0e797cd59c15fbb53345c25b59ec2e
SHA512 65bbe143f9228b174820034a90867357a6e50ce14393a5de703d55f04f5a14989f4406dc177471eb78cf08dbabb3f3657d600f87dc08adce2e173010c2607787
SSDEEP 98304:P5sI+4xhhSnZw2+zx9O+rsy7ud1MYDZjPNm:eI+4Jm819TCDZrNm
TLSH
T1884633E39CA168B9F033DF705F691C42BED7274CA432B57E7DAA68009FE4721E625250
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Inno Setup is an open-source installation builder for Windows applications.

Inno Setup installer

installer

Minor OS version

0

Major OS version

1

Entry point

39956

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

8B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

_About.txt

SHA256 89d102d6209f1cdfca122eeed920bc58d394774db16985be01a30d34baac0564
MD5 739585d1b51a0801ece28159881f69e2
SHA1 a71e6f464365969e4dc3164ca56b0e80a932d7b4
SHA512 964ff4884644d85b432bca2fde89cc5d62b75d66969658351766678bf6ab6f14131d6693405e7b608d8c5618e46c7475fe5ed6d4bfa3903b0dcb89d86e198ece
TLSH
T1164121514ACA5CAF2011D2078C1D15CDBE8A14FE37B7572A22B47A2E22FF814872CD9C
MD5 SHA1 SHA512 TLSH

_Readme.txt

SHA256 82f4ea59fbcd5309eba8ce9893ee5243134dd22939c84902ca08d6aa8aa45fa9
MD5 b62006957bb105bfd1ef744bd264ae93
SHA1 d3f217508ef88559afa1501425a4899744a742fc
SHA512 fd8ebf004a797935a8bc057b277ce363047ba69f8bebeaff4976ae8f03fe2ba8ad66c0b65ba422a4f03a8de0fd88e26ef992eac86461da6b43f2a2bf1ad3f10d
TLSH
T17D514F47C36E6C6D4140B00BE90DBECAFA6B15BD7B7983127028387E33ED479862811D
MD5 SHA1 SHA512 TLSH

_Silent Install.cmd

SHA256 6601cbe618dd90ef2daf02fb3fd41b492ea8b2afa2b234d3b7f483c432e4d78d
MD5 1586fcb6353ba97337072ffc9a49e046
SHA1 9e29a16a45b4a0a61e0c481ad20f5c278c3504d4
SHA512 e36ef005c18bb0905d453afa3eb2eabd1c3552e72385fb1ba72992a0db440cedfc3f84ca1237c2479033e2ab1f81d18ec061941d046ff21704da66bd76ed4138
TLSH
T139115A773674E54C93B40F842D748522746122DB2DB20D50B57F403B87E46C8386CF5B
MD5 SHA1 SHA512 TLSH

_Unpack Portable.cmd

SHA256 7256488f34caa5538294556b0b728e291cbe635f8d3cc6cd8195ad4bef1f782d
MD5 11bb19b34ae3d7efb2f2896416bdecfd
SHA1 76749fa742a58c585c7a9e6044d798776fc35d00
SHA512 8ced83bb80ca73c583890bacee3c2306c347e84c33bf883dd4589139b8d830d01131f6d8e3c6ea7a29b9bea59c40be447d5d2968a3d78bee2fb11d4116996377
TLSH
T16B11532B36B4E94C93B51F882C748522B47122DB2CB20D10B17F843B87A56C9386CF9F
MD5 SHA1 SHA512 TLSH

Описание.txt

SHA256 d72665491d8a0b00344cb01b066e1de249c8dd5b8d135095edcd8187f3fa20e0
MD5 c2b27051a7e72e053373849b57b144cf
SHA1 600d37fb7fd03232aabcb2b2e13f3f7d6031364d
SHA512 3dec8af8249793545a905139a7a558192842eb7df1c815c344db367beccf9c56378b6245ba334b90a856cee8ed72ea588a7d455c45ded4c7bf1b7ae082785a23
TLSH
T18E2133D0210946F27FB40DBF764F0BAEA4AC45CB9F82EE51E513941527278323E23969
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

process_lasso_18.3.0.34.zip

Process Lasso 18.3.0.34.exe

generic

_About.txt

_Readme.txt

_Silent Install.cmd

_Unpack Portable.cmd

Описание.txt