loaderbot | 0x0006000000023277-205[.]dat | Triage

Sharing

General

Target

0x0006000000023277-205.dat
Size

4.0MB
MD5

627beeff653f2b7a84ffe5c0c22d86cb
SHA1

8ba37c58f5812120ac013812fe57218c10960158
SHA256

c6b22b30b4d953c0feef5549d39a1e08491903b3c0f327f3ac67f6abd45461ab
SHA512

52f82f7d620d6cf2504749a65ea8d6995bb4132b9fb793964652f5140856db4933db49f394565be564787e828c3e5b80a579a7d41f6137ba2caa90967cbcbc8d
SSDEEP

49152:rNDFFPJu8fBsVE6ij+RNg+UKpBvtqB3m1RC3:pzP88fBsnZTgOtqB3m1RC3

Score

10^/10

loaderbot

Malware Config

Signatures

LoaderBot executable 1 IoCs

resource	yara_rule
sample	loaderbot

Loaderbot family
loaderbot

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0x0006000000023277-205.dat

Files

0x0006000000023277-205.dat
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ