loaderbot | 4699ccd7683617b2096688498fbc94099cb15b02e40399ea3babec0bb23815ab | Triage

Sharing

General

Target

4699ccd7683617b2096688498fbc94099cb15b02e40399ea3babec0bb23815ab
Size

16KB
MD5

b14a4a22a213c79e68e0d2f6e53ae412
SHA1

5f95ab620bad45bbcf4c1a6f406eab6fecb96d08
SHA256

4699ccd7683617b2096688498fbc94099cb15b02e40399ea3babec0bb23815ab
SHA512

fde0a020e2bfc74d79dc2da0a17d1df5635788d54bf5f67f032b35cf820a85a0d4f7118cff2a81ea29d2b30027370dd8da23c73e16adf3123a29366fb0693fbf
SSDEEP

384:1KBvkPHItH19GTXjdhi0vuujYcV6AUwJFZb:1YeotV9AhiefYcV6Dw9b

Score

10^/10

loaderbot

Malware Config

Signatures

LoaderBot executable 1 IoCs

resource	yara_rule
sample	loaderbot

Loaderbot family
loaderbot

Files

4699ccd7683617b2096688498fbc94099cb15b02e40399ea3babec0bb23815ab
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ