AtomLdr[.]dll[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AtomLdr.dll.exe
Size

8.1MB
MD5

513eecac1e602be2a404f1d70719dffb
SHA1

7b552da9131831538987c312c0fc3d85d26a2e47
SHA256

80ef5b531e2e8cb19403a8f06cfa1d6743900957ebf24d84f63211ae04d6bc1f
SHA512

9849963322c5c07b87f19534e0e93b42953483ba0c15dcfe58e18fe795af965ccf26f79a76b673135d42b1c64b6f53534939258e46027f1afe2e12e61b9dba1a
SSDEEP

196608:gqtd+hY7xGKq9SsHd9rm2niE6RK/Io+IDZT0Lx:Lt7Q97HX/n76RK/394

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AtomLdr.dll.exe

Files

AtomLdr.dll.exe
.dll windows x64

d9e5262dbdb011627a845c0251a44802

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetCommandLineW
HeapFree
CloseHandle
CreateEventW
ExitThread

user32

MsgWaitForMultipleObjectsEx

shell32

CommandLineToArgvW
SHGetFolderPathW

Exports

Exports

Atom
AtomHelper
AtomSystemInstaller
InitializeAtomSystem

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8.1MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ