SecuriteInfo[.]com[.]Trojan[.]MSIL[.]LokiBot[.]RPS[.]MTB[.]5774[.]12846[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.MSIL.LokiBot.RPS.MTB.5774.12846.exe
Size

852KB
MD5

f61b7cc380d0da89491710f1d24ee995
SHA1

5c0c37eafc4b687283845073692975910a8c3695
SHA256

b49c593f78359176f5ac6fea2897de702c51d6e7838ae735cd326d68d99b5aed
SHA512

3ae7b0c621b2a5f77e367a90ac903a88ec54c15357d54fd5d70776610c4e88ba89583c16ec0b61270d9e8c0d00907c691d60ed32ea03ffeb2e7c93059cb84c25
SSDEEP

12288:jp/buj/ZWeJbqZ9WbfQhCRTRUAOyjBMTsZ84J1WYixYij:kcXZ9WDkCdhLB4P

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.Trojan.MSIL.LokiBot.RPS.MTB.5774.12846.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 844KB - Virtual size: 842KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ