ShibaGTGoldLoader[.]exe | Triage

Sharing

General

Target

ShibaGTGoldLoader.exe
Size

1.1MB
MD5

640b15c583494a795fedd296c9551fa0
SHA1

637a8f4fe94db858c58424ae1297ac266bbf7c35
SHA256

e45e7b4fe6103dfa49faf9e8e9ce67f1c4f3031e30d9c2817998d093d4df94c3
SHA512

fbf2037f7a929d2f20c2275bd573747c261c56e24e84398e31ff460d8f2cf3e982b6fa2ab2ba89a4b5ea694406d375741a79b20713b18152bb79e824d2411f30
SSDEEP

24576:nl7HCPBxBJt3Be4W5JQTftfjIJi/L0YbF2QgqSg7p4bac8P2ibOaA:lmrBrWfQztfj0m5d54md2wOaA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ShibaGTGoldLoader.exe

Files

ShibaGTGoldLoader.exe
.exe windows:6 windows x64

8d5f2269d8df9e6a3c016f6750afd080

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

PathMakeUniqueName

advapi32

RegCloseKey

user32

PeekMessageA

kernel32

GetModuleHandleA

Sections

.text
Size: - Virtual size: 881KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pexe
Size: - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE