C4PROloader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

C4PROloader.exe
Size

1.4MB
MD5

6cebf1d3d4c2e660911464a366b522d3
SHA1

b16bb5afa31718f60616b5b03a55ef82d6848f1a
SHA256

62db28f4303958db79d5447aec1df09088f0db4ac886aa6b9f0e6c708d5ec0d1
SHA512

2a30f564ed40c380f5f388c527083655482ffbad35965d2bd3cdecff520eb07ba3cf24f884ee4d976c3a503be0fa50ec6c56a598aa804449f9ee42ccbb1defc3
SSDEEP

24576:uxLuxuLtUU+vkU14ZOcwE6uTvKNBsM+OkaEbQUv2gVbAd5k5BkACNQ:uxhLtPZQE6uIv+3aE8Pgrc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
C4PROloader.exe

Files

C4PROloader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ