loaderbot | 5b0b780a1caa13c737099f0d389e682cb74e63e62ae53eeed29167e74833977d | Triage

Sharing

General

Target

5b0b780a1caa13c737099f0d389e682cb74e63e62ae53eeed29167e74833977d
Size

16KB
MD5

8f9db1d76c8ebcd539121678fd28554d
SHA1

446d66da8b0978f6d51cf20cf992a05356c9185a
SHA256

5b0b780a1caa13c737099f0d389e682cb74e63e62ae53eeed29167e74833977d
SHA512

553382301e7510ba6e461b918ad2c5397ee754ac8128359021b4b6f148a65eae99c022a7a2b53820bed304992f9fc873650d0cf90c40ff9f24d20e30f1f8c20c
SSDEEP

384:bm9vAPDVH19GTXjdhiMuujYcV6AUwJFZb:bgyRV9Ah/fYcV6Dw9b

Score

10^/10

loaderbot

Malware Config

Signatures

LoaderBot executable 1 IoCs

resource	yara_rule
sample	loaderbot

Loaderbot family
loaderbot

Files

5b0b780a1caa13c737099f0d389e682cb74e63e62ae53eeed29167e74833977d
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ