loaderbot | 3a1b0cf20a31556d2372c4e16026ab0d[.]exe | Triage

Sharing

General

Target

3a1b0cf20a31556d2372c4e16026ab0d.exe
Size

4.0MB
MD5

3a1b0cf20a31556d2372c4e16026ab0d
SHA1

2efabc5b1eb697113b90d30c8eb165a2086776ad
SHA256

ae5f1fd094029b7e60c1d7998501d17b7585254e1b0644f151b20bd83bf65e7a
SHA512

43f6c7f093410ce3e0d7297a21b35a6dea1608300044ee172270249f2f1ef543eb0e866308e6a19af670d137b995bab162d7098ad0061c6638fd6898df63d6ab

Score

10^/10

loaderbot

Malware Config

Signatures

LoaderBot executable 1 IoCs

resource	yara_rule
sample	loaderbot

Loaderbot family
loaderbot

Files

3a1b0cf20a31556d2372c4e16026ab0d.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ