SecuriteInfo[.]com[.]Trojan[.]MSIL[.]LokiBot[.]RPS[.]MTB[.]11363[.]31485[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.MSIL.LokiBot.RPS.MTB.11363.31485.exe
Size

848KB
MD5

555da0f04382498ce84f5a61866c8ae7
SHA1

21cd420fd30f03c5ce7eac09566a41ba87d0bedb
SHA256

b673ccbb584d0c5bc0f052883d2235b6eec5a68cb7c8c78c3b6faf6be863de3d
SHA512

28075d9223ea1f660c7fec23bc674f283cb74a0b21af38bc387a720822fe932fc2273b06cd4f5f8c287a367a0cefe2be3ec66c6d22c3463fd7c7d572474492df
SSDEEP

12288:Pp/kiRuEjpEnHglVpcy+s2Ac/68WTkSoe6IEWiGIgTBtRuhkVbdKzq:ac0o7chJCTjz6IEWiGBBtRJ+

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.Trojan.MSIL.LokiBot.RPS.MTB.11363.31485.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 840KB - Virtual size: 839KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ