lazygit_0[.]66[.]2_windows_x86_64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
lazygit_0.66.2_windows_x86_64.zip
Size 7.2MB
Sample261023-antk3sgw21
SHA256 8b1e2194c2d8ac660f0a132cb4384e9d2fe1405217a144e280df16383c18d45c
MD5 7e4b71f1e4387f33b6346b43f5b68ff5
SHA1 dd5fa793c07ccace1887f8291f6467b285d01bf3
SHA512 11678f750f01d2f5ac406ec3166f359732247640a7b756dbe79ff603084c8082ebe9b0c2becc94866c6f237bb5b73efaa6bb7ec0739d01bd043d4cfa5009c433
SSDEEP 196608:5wpaCzha8YUdxZkM0j1pN6mIHbTcPCjbtADRBNk4SiPySp:Kzh/lcM0R/6mShADRBNkqPz
TLSH
T10676337D3D6BE4AEB8C5C3084EB4A0443868F2A55FE6ECF2725E075D40A63CAD671984
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/lazygit.exe

File Explorer

lazygit_0.66.2_windows_x86_64.zip

.zip 7.2MB
LICENSE

1KB
README.md

39KB
lazygit.exe

.exe 20.3MB

lazygit_0.66.2_windows_x86_64.zip

SHA256 8b1e2194c2d8ac660f0a132cb4384e9d2fe1405217a144e280df16383c18d45c
MD5 7e4b71f1e4387f33b6346b43f5b68ff5
SHA1 dd5fa793c07ccace1887f8291f6467b285d01bf3
SHA512 11678f750f01d2f5ac406ec3166f359732247640a7b756dbe79ff603084c8082ebe9b0c2becc94866c6f237bb5b73efaa6bb7ec0739d01bd043d4cfa5009c433
SSDEEP 196608:5wpaCzha8YUdxZkM0j1pN6mIHbTcPCjbtADRBNk4SiPySp:Kzh/lcM0R/6mShADRBNkqPz
TLSH
T10676337D3D6BE4AEB8C5C3084EB4A0443868F2A55FE6ECF2725E075D40A63CAD671984
MD5 SHA1 SHA512 SSDEEP TLSH

lazygit.exe

IMPHASH 70df50797f7a85a271c38135c5679c40
SHA256 c40a448f363ab2ccc5f14c997d95f096ee8225ba60784f93b9092511a6d9afd3
MD5 a386b466d597d4aa72cf10554ca4f91c
SHA1 490f3cfaeaab62cc81e2e3910d4dbb248fb31820
SHA512 b87cf06417ef0b65e790f39f49296e7f8780b8cc2bf37e5712beb635e119bed5972233f4c858eaf3b4212cf729173a5c3015bb900ebd04687cc60f3499b83cea
SSDEEP 98304:W1rMmbd8HssIVswexwTc2s7xBU+5NX03pPHtPKLQKMk179Az64lXETz:qzCHsNpMDX03pPxZgeGTz
TLSH
T162275C03DDA541E6C9AEC13AC5A29956BB317C41872033D72B64B6243FBBBC06DF6790
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

603456

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

8.2MB

Virtual Size

8.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10.8MB

Virtual Size

10.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

960KB

Virtual Size

33.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

246KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

192KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

lazygit_0.66.2_windows_x86_64.zip

LICENSE

README.md

lazygit.exe

kernel32

generic