AtlasLoader[.]exe | Triage

Sharing

General

Target

AtlasLoader.exe
Size

72KB
MD5

85282b0e12f73dcb8c106a8e3dae2e50
SHA1

5f41ddb3bcd8260eda76452de9d3f0c4288528ea
SHA256

adcad18e1e03280010904fe1c5eb3defb5494d2c60073e74e8726f6902be43a0
SHA512

bbff990506e28ae4861ba087801116ca0c85e58c42574e4d7593dda67aa7d3e1b1bed7dba73dbfb41b3d2a00485551cc1847da4bf51b5b11d016e04955ae51c6
SSDEEP

768:1tDIptIoDSacHl7Enrwy/Gd2dfqAstDpm+a/n38xDGJWPwyLgwupKLQdNf7a/uyW:bC4js71VQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AtlasLoader.exe

Files

AtlasLoader.exe
.exe windows x86

699cc9570c233cf12692f95447a4cdc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

ShellExecuteA

msvcrt

__argc
__argv
_environ
_XcptFilter
memset
__set_app_type
_controlfp
__getmainargs
exit

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ