loaderbot | 3bba9e271c496801e281bf968bf77ee8[.]exe | Triage

Sharing

General

Target

3bba9e271c496801e281bf968bf77ee8.exe
Size

3.8MB
MD5

3bba9e271c496801e281bf968bf77ee8
SHA1

03ca0271e7ca4adb1e472f951fa7e85724369607
SHA256

13684bae5dce6207995b4dbd719c65e9eab8d831e083aeaa27fbf9e857dc346e
SHA512

6f0b6e70b8b3dfac8b927250740b13bb0aeac3b932534c231c11c36e9226c0700b938b7c24c857a7833f6f39a3f5bf46d90f559fd67647a9c72e9eb08e37d39b

Score

10^/10

loaderbot

Malware Config

Signatures

LoaderBot executable 1 IoCs

resource	yara_rule
sample	loaderbot

Loaderbot family
loaderbot

Files

3bba9e271c496801e281bf968bf77ee8.exe
.exe windows x86

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ