loaderbot | ab0637f04f820ffb2ec87cc2e6ac9090[.]exe | Triage

Sharing

General

Target

ab0637f04f820ffb2ec87cc2e6ac9090.exe
Size

3.3MB
MD5

ab0637f04f820ffb2ec87cc2e6ac9090
SHA1

b4e1955e7e42965d419a542edfb62defbb47d7d5
SHA256

73af06471b22e157f28e047b508015b9dffb41ae1972ab698f8d949976e7b139
SHA512

fb57068bf1a457e228a4a2720874e6a1814deab3fecf02d9c66c479b8ece7221847007837fc03660904561e792821c820a29840fd90c6e348e4de118392010cf

Score

10^/10

loaderbot

Malware Config

Signatures

LoaderBot executable 1 IoCs

resource	yara_rule
sample	loaderbot

Loaderbot family
loaderbot

Files

ab0637f04f820ffb2ec87cc2e6ac9090.exe
.exe windows x86

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ