General

  • Target

    SwitchedLoader.exe

  • Size

    191KB

  • MD5

    eb4a3c8e8c7ab4958a161b6b4cc81771

  • SHA1

    f26d10fc884aa3dd7adb7b4a2a72d7f1714b3a17

  • SHA256

    46adc524b8c2df2f74153f8aa494091bd30e03e1fef44edf024e900ab2eb8773

  • SHA512

    63f39a1fe8658f518486bde48366016f5b6cbb16a4e58e2ddcfe34351ed3dbd4da25159ad9e50d85a09343006ca0c9221030a6691b5dedb5dd3cfb10abe3cfb1

  • SSDEEP

    3072:QPpnwEyi9B4dKuMLotY3roqmxrKJ6d5LEH4Fb4Vby43P9x+KTItDqTegNIv:QBnXyin4dKQVKJ6DbkbpPHTI4TegN

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SwitchedLoader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections