Static task
static1
Behavioral task
behavioral1
Sample
LoopLoader.exe
Resource
win10-20230703-en
Behavioral task
behavioral2
Sample
LoopLoader.exe
Resource
win10v2004-20230703-en
General
-
Target
LoopLoader.exe
-
Size
20.6MB
-
MD5
1c2ae727df810df1f128702616c8f466
-
SHA1
244281641e716842f00a13b46b09cd6374adb779
-
SHA256
80938c856c6df2de046b408132e83e60cc36f9dea1522531ac560d11b1479025
-
SHA512
0c814bd586131fb0845659700f72f7bd48eaae94e9c332a979ae0d024abbbf109edc79f784bbc1431e8cea100a0fae34935f5a7dc6115b9461863851a3b92913
-
SSDEEP
393216:zgnbB3/rzEoIs22FI+ybnIruQuhataV5F9pajLhOn8ts3wbYhWU:zYbB3/rzEoIsgTIqLVZOInWMiYL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LoopLoader.exe
Files
-
LoopLoader.exe.exe windows x64
6ca5aca25f94ef4c1e91f5578717983b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d9
Direct3DCreate9
kernel32
SystemTimeToTzSpecificLocalTime
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
PostQuitMessage
imm32
ImmReleaseContext
advapi32
CryptDestroyKey
ws2_32
sendto
crypt32
CertCreateCertificateChainEngine
bcrypt
BCryptGenRandom
Sections
.text Size: - Virtual size: 889KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.}rN Size: - Virtual size: 12.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. b? Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.(F0 Size: 20.6MB - Virtual size: 20.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ