Behavioral task
behavioral1
Sample
c9146e423c92744eb2960112b45bdbd59f2cbd2ac99d388ab1cafd78181f028d.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
c9146e423c92744eb2960112b45bdbd59f2cbd2ac99d388ab1cafd78181f028d.exe
Resource
win10v2004-20220721-en
General
-
Target
c9146e423c92744eb2960112b45bdbd59f2cbd2ac99d388ab1cafd78181f028d
-
Size
16KB
-
MD5
6bd58a85b177f63258c7e23abc6857a0
-
SHA1
4b72403d1fb6cd8b685e6453f8734e8a74b2568b
-
SHA256
c9146e423c92744eb2960112b45bdbd59f2cbd2ac99d388ab1cafd78181f028d
-
SHA512
cd3dc83bce9bb634a0dfdbf2c074df1d9e1a12773c412cfab765694f4e7873527675b40a271fa751879baf0ea8eb7bc8a071a8a90ff1290bb96f3eca2b39705a
-
SSDEEP
384:DWxvd9PWblH19GTXjdh9mnuujYcV6AUwJFZb:DUfeV9AhEfYcV6Dw9b
Malware Config
Signatures
-
LoaderBot executable 1 IoCs
Processes:
resource yara_rule sample loaderbot -
Loaderbot family
Files
-
c9146e423c92744eb2960112b45bdbd59f2cbd2ac99d388ab1cafd78181f028d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ