loaderbot | 6e42ffd78e2b9d82ca6c543ec01063b8[.]exe | Triage

Sharing

General

Target

6e42ffd78e2b9d82ca6c543ec01063b8.exe
Size

2.3MB
MD5

6e42ffd78e2b9d82ca6c543ec01063b8
SHA1

c82c9bdcb09ef5aaed8e613613f7ba8253e0afe7
SHA256

4f9e91d7b3a30bb8b9e125b9921207fd40b5ad7aecdc544f214a7f6fb85c94fb
SHA512

815b729e12b2eb0562cb37e4361328ea2786fb6f2a3351f83f1a7bef5596f9ebf5b22b69411fb817bff29896cae77ed9f494929cd63033795b7ad68c5a100a7d

Score

10^/10

loaderbot

Malware Config

Signatures

LoaderBot executable 1 IoCs

resource	yara_rule
sample	loaderbot

Loaderbot family
loaderbot

Files

6e42ffd78e2b9d82ca6c543ec01063b8.exe
.exe windows x86

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ