Static task
static1
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20230220-en
General
-
Target
loader.exe
-
Size
1.5MB
-
MD5
6ca711eebf8a4ac792415aee6efa5d71
-
SHA1
ac552a202e35d4d324e98304f4e4c9d23e00ddb1
-
SHA256
96059d3f547306c7d27ef23056261569faf43b97d78ea8053c6dba9718b9c0df
-
SHA512
2ba998e7742374c8e5d73eef840fa58aa0d3f952f7a1975777681348bb27e15b0dc79f44220cf4e00caa589dfabb710efda2946a6a99ba9e161273d55df341e1
-
SSDEEP
49152:znUVgHzeweKASR5s2PxD0lLC7R18tggrwB:znUVZpdT2PV0RUqggcB
Malware Config
Signatures
Files
-
loader.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ