LightBurn Loader exe Trojan Zpevdo File Malware Analysis: cb98cb499c26b0330fcb160c835423d0

Technical Analysis

File Name	LightBurn_Loader.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.210.174
Database Version	2025-03-16 05:00:53 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	cb98cb499c26b0330fcb160c835423d0
SHA1	2c58f535bf2a8cf76f71eed0d740ed5164478150
SHA256	dd3e12c29ed282a519deec82dd7c3ee3410511526b4d12fbf3469b624c0e437d
SHA512	365ab549097a323ea21352113c87ee24b081c3be3f0c75f383357b4b37f01e46168f72720adee10a39b26165e2397224878c8939404e1818aa67e18d6cf7f703
ImpHash	7520160802f7ef8ba1f744d6e2893d6e

PE Analysis

Basic Information

▼

Icon	Hash: 619a5444c312a2055cdd9bc13020e91d Fuzzy: 533119128a059018470c34bd30500597 dHash: b8664f3061e0c4e0
Image Base	`0x00400000`
Entry Point	`0x00422120`
Compilation Time	2018-04-16 21:59:10
Checksum	0x00039829 (Actual: 0x000330cb)
OS Version	5.2
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	10 libraries kernel32, shell32, psapi, ole32, version, user32, oleaut32, advapi32, gdi32, ntdll
Exports	2 functions
Resources	4 Resources
Sections	11 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	151,604 bytes	152,064 bytes	5.76 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`62BACDEC2EBA311AC5610FBB011523D6`
`.data`	`0x00027000`	16,032 bytes	16,384 bytes	4.21 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3AC0B981C6E47DB2BBEC3D51BC113CAA`
`.bss`	`0x0002b000`	27,240 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00032000`	5,306 bytes	5,632 bytes	4.07 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CBD3BEC543725C3D522283AD1A6F37AA`
`.didata`	`0x00034000`	552 bytes	1,024 bytes	1.53 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B45F6561DE84EABEE092093BEFF228A9`
`.edata`	`0x00035000`	113 bytes	512 bytes	1.34 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`EB4397F868B87770F2A72CC50CD3C582`
`.tls`	`0x00036000`	548 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00037000`	109 bytes	512 bytes	1.37 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`32DEF711E2932818691C3231D5038E23`
`.reloc`	`0x00038000`	5,684 bytes	6,144 bytes	5.94 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`80E6062D93370F257418B6ABEE468B98`
`.pdata`	`0x0003a000`	8,988 bytes	9,216 bytes	5.20 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`EFB1BF2FCF041E777FD76C97DC4C08E8`
`.rsrc`	`0x0003d000`	5,680 bytes	6,144 bytes	6.02 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`78FAA80562B1B46C0BC1460281019271`

Resource Analysis

▼

Total Resources: 4 (5,347 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	1	4,264 bytes	79.7%
RT_RCDATA	1	308 bytes	5.8%
RT_GROUP_ICON	1	20 bytes	0.4%
RT_MANIFEST	1	755 bytes	14.1%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

LightBurn_Loader.exe Trojan Zpevdo Analysis