Static task
static1
Behavioral task
behavioral1
Sample
Loan.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
Loan.exe
Resource
win10v2004-20231020-en
General
-
Target
Loan.exe
-
Size
603KB
-
MD5
627ab3c72dc8e1ecfe109b2cb7d3bfb1
-
SHA1
f2eefd9752ab5c987589c31fd71f097aa7d14b05
-
SHA256
69bafffa9a3148df9565fb20eb776878b21d0d9b8ff8cb94fb4040150ddce238
-
SHA512
0ac5c67a536ae204a7ea9f2ce97debb448ece3daf862e47e45ea66735435fd3739b3cb35319a6efb0729bd9c9d8c97ddb024e8fa5316277bd194ee78723d3b34
-
SSDEEP
12288:BUR6R1oaiBZSps2XHXbpVCLZrvh2pw5+w26BySxQYQfoehAj7:BUR6E0pf9Vyr5awY62fdhy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Loan.exe
Files
-
Loan.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 597KB - Virtual size: 597KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ