slinkyloader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

slinkyloader.exe
Size

20.5MB
MD5

50a48cf49bc47ad3e5b9679d0a46f1a2
SHA1

b5fd60a210cba80ee3eced396f10b5415ee6729d
SHA256

6df45e7b64305b4cdf7ba135b024c6f1b68f39cb5fac1d06a474986394ab5fb0
SHA512

d94eb9c1d863d933ea0b221c31c19c47cebf9aff50ebbb1e5a0476363b3aeec1847f92562023babaec56847d1f6edb19b450759eeae1ac07c44b4f7079110571
SSDEEP

393216:Oiigof5ci+c50Fa7K39n0LHOz3tcA/YFspJfUXvakYHQFSdbhALSVQtikwtW3Jit:OiwBc6ot3uLuz3tM6rfUXCkYgU/VQti0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
slinkyloader.exe

Files

slinkyloader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20.5MB - Virtual size: 20.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ