Loader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Loader.exe
Size

953KB
MD5

292090e82dbaa13623226a78ae524c49
SHA1

cded5467dbafb296e770012021a172592865d2d2
SHA256

7eac10ee74d1e59158230b22e29978aff0f9c1717c6cbd41b745fc6ecd2ffded
SHA512

415d5d53be23af48ddb4b90a1e78bb97ba085a54aafcf14af3cc8452cf8afde0cd57c2b41f1d512c0cde2785571a895414e48af113159048bd66f7f0f358628e
SSDEEP

12288:ELWvTGar3XgfkRCjERNFmEJPw8xGAfAuEQoX040vd3lGIG/4qfZZh/PtUcbPyewu:AWviaOOxjLE2UhQqxZh3tUcbU5dsR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

Files

Loader.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 504KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ