ExLoader_Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ExLoader_Installer.exe
Size

23.3MB
MD5

bbc2c09fb7d05fde3de41787d87abd1b
SHA1

43f1782764c7329610d8a4ed3a30209b0786063e
SHA256

c641affc19d76683f21933e8cb772d9d91fdbf139010899bfe8ec009b43e59a7
SHA512

8ce6cbb3a1888e60b48ae58ebb46af4c903cb2757710c3e32146eac025933bfcd7f8fb950ec13f86d5798aa5f905566ad80e9f214cb805d32f7c6485be344358
SSDEEP

393216:jiPP7PBybESqyJYl9O9w/m4uhbS6K41k0g:jeP7p93eWQk

Score

1^/10

Malware Config

Signatures

Files

ExLoader_Installer.exe
.exe windows x86

Password: 1424124

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 23.2MB - Virtual size: 23.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ