Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Ransom.Loki.24223.16382.9455.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Ransom.Loki.24223.16382.9455.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Variant.Ransom.Loki.24223.16382.9455.exe
-
Size
862KB
-
MD5
f31b0cc216020164c0f573d1c0ec8024
-
SHA1
8e3be6f01deb2ac6995cc0f3dc687412b722beae
-
SHA256
09581fc9ed4ea3eac091a119cd524856ef8a9236c54b3269c3c7898d380b2a4d
-
SHA512
cb8657afdafbdb70ed909e707101dc8e913c4e73d8ab4ca724b096b98ddf85b12f02dd871961bf85a8565a4c9f27e5fd8537dd98eece475cebee74ac6b6fdf40
-
SSDEEP
6144:cr0awcsfOqeazCR9aYuiAUDAe57BMrwvQ9ublOgh6upQP6mkGHcCgIpZugDtAGIC:3PTiVDMrCE+ZrmkGHZg8uPxwp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Variant.Ransom.Loki.24223.16382.9455.exe
Files
-
SecuriteInfo.com.Variant.Ransom.Loki.24223.16382.9455.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 570KB - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ