loader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

loader.exe
Size

9.6MB
MD5

b1ffa9811710623f9f0a37494f288447
SHA1

c5fe7aed02d70b5ef9c30b5c4520de2c81b8c655
SHA256

b8844878c0df4f7d1f9362a4339c2af509e0f49f0b5dcbf6b8c3522b9c9023b7
SHA512

27ae660a146c974cd03e66410e3e632cc3a69d0952ac50d658b535c8d98e53d09207f5933cb787e25fdb3ead5a025dc90c147d1e9928678ef96aec04e4bf4fc2
SSDEEP

196608:ZM2op6SSs4RwVB2T8cwOpmUIvmCDhC2G7WY4EbiClLe6kjp2iWqG4WGn8b4u9sYf:ZM2op6SSs4RwVB2T8cwOpmUIvmCDhC2q

Score

1^/10

Malware Config

Signatures

Files

loader.exe
.exe windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.6MB - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ