Static task
static1
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20230220-en
General
-
Target
Loader.exe
-
Size
9.4MB
-
MD5
beeda28f47c6b15a862afadad65756ff
-
SHA1
13438cb27ab5b00488b1a54c2400aba7324af496
-
SHA256
c51f33382b7186ae9ec27013406e5599fe6e6cb97bae9f36591f93e8ed15404e
-
SHA512
4e0b29ecd38f1a4503959b19577e7d4462ba0853cf0898de7792597734431ef86308dc6e45eae88e02af33575505b99007cae064e64de9e67e829957d24a0e0c
-
SSDEEP
196608:z9J6nYDw9gQR6POGHDa2/tu9FauhLwKR:B9ixRka21uXaMw
Malware Config
Signatures
Files
-
Loader.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 4.1MB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE