Loader[.]exe | Triage™

General

Target
Loader.exe
Size 412KB
Sample240222-pr6r5she59
SHA256 868f78eac76904c7c8286243061396fa05a9c6c3cc4315f7a7848a358916ee29
MD5 ca63e74104cfd7ee90019875c0cffe6b
SHA1 44660ef376819e6a0d275885913e3d4f2a7e3f97
SHA512 ca43d646d8f354977fd6a8745622b00098afce08760e850f4865b106407202a36a837683f0cab4c3b4b877f45c36036c9a835f4f40d32bc5881c17a7e016d715
SSDEEP 6144:62X+joLNTy6Yqj2ErwTt3ISmebEeHSTL0pq6vZ4retBHNU3ZkX7rQ:R+kLNhqErwFISmeyUvZ46nm3ZqQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

File Explorer

Loader.exe

.exe 412KB

Loader.exe

IMPHASH b77b99c3883f50fc5eeab54139139034
SHA256 868f78eac76904c7c8286243061396fa05a9c6c3cc4315f7a7848a358916ee29
MD5 ca63e74104cfd7ee90019875c0cffe6b
SHA1 44660ef376819e6a0d275885913e3d4f2a7e3f97
SHA512 ca43d646d8f354977fd6a8745622b00098afce08760e850f4865b106407202a36a837683f0cab4c3b4b877f45c36036c9a835f4f40d32bc5881c17a7e016d715
SSDEEP 6144:62X+joLNTy6Yqj2ErwTt3ISmebEeHSTL0pq6vZ4retBHNU3ZkX7rQ:R+kLNhqErwFISmeyUvZ46nm3ZqQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

123

Minor OS version

1

Major OS version

5

Entry point

27938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

GetStockObject DeleteObject SetBkMode SetTextColor CreateFontIndirectA SelectObject GetObjectA

user32

GetDlgItemTextA wsprintfA MessageBoxA LoadCursorA GetClassInfoA CheckDlgButton SetWindowLongA CallWindowProcA GetActiveWindow

kernel32

WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers VirtualProtect VirtualAlloc LoadLibraryA GetProcAddress lstrlenW CreateThread Sleep WaitForSingleObject FreeConsole QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess HeapReAlloc RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW GetProcessHeap HeapSize DecodePointer

Sharing