ST_External_Loader[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
ST_External_Loader.zip
Size 32.7MB
Sample240302-3f1nmsac9t
SHA256 d4cc4320d4c688a4509d096f8ca3e7d6da179c941a7ac3622e8db0d92c138133
MD5 8a9611994e3bbadc57c0984e8231d641
SHA1 83424e93b7795741cf9178f7aaa74c757a5fed1c
SHA512 3a863812b74e0ff54057c243fb7772196cbd8c4540bd47c79ae2e35814e8bce27d94d857bd63183fb70459fc66517d8765546b6505acb8029d046f515bb277d2
SSDEEP 786432:XcDemssVKImScQ4FxiCFbkpLXfYDpns/S0vCNS9c6:GhYImScbFxzop7YDpnseN36
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ST_External_Loader/ST_External_Loader.exe

File Explorer

ST_External_Loader.zip

.zip 32.7MB
ST_External_Loader/README.txt

155B
ST_External_Loader/ST_External_Loader.exe

.exe 37.8MB

ST_External_Loader.zip

SHA256 d4cc4320d4c688a4509d096f8ca3e7d6da179c941a7ac3622e8db0d92c138133
MD5 8a9611994e3bbadc57c0984e8231d641
SHA1 83424e93b7795741cf9178f7aaa74c757a5fed1c
SHA512 3a863812b74e0ff54057c243fb7772196cbd8c4540bd47c79ae2e35814e8bce27d94d857bd63183fb70459fc66517d8765546b6505acb8029d046f515bb277d2
SSDEEP 786432:XcDemssVKImScQ4FxiCFbkpLXfYDpns/S0vCNS9c6:GhYImScbFxzop7YDpnseN36
MD5 SHA1 SHA512 SSDEEP

ST_External_Loader/ST_External_Loader.exe

IMPHASH 54c471b5647a2ecd14997c5ff388af00
SHA256 c05577139a84f3e3591546d727d8501f2e2f65631d48122683331373bbbeac12
MD5 66c4e5860de0c00a797a0f10a7615fd5
SHA1 f48f6099b31a616e938c95568a8886d218f06a47
SHA512 941c58cdce64e2946337374cbe9b0bfecdcdad78f7a59c6b6a973fd17fa9be28d04a8418a0269aa1c6cd47983eb4a7278919400a74886b27a991f87e9e4ce0c3
SSDEEP 786432:iSniwA6rIe+6UaQ575Uz7tzKju1bTyHQz9bq2Z:vx8e+6Up5F2NKju0wz9bq2Z
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

48850893

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

232KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

451KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xor0

Size

Virtual Size

21.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.xor1

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xor2

Size

37.8MB

Virtual Size

37.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

296B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

ST_External_Loader.zip

ST_External_Loader/README.txt

ST_External_Loader/ST_External_Loader.exe

kernel32

user32

shell32

imm32

msvcp140

dwmapi

d3d9

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic