Loader[.]exe | Triage

Resubmissions

20/04/2024, 22:36

240420-2jd4dabg37 9

20/04/2024, 22:33

240420-2gwkmscc4s 9

Sharing

Copy URL Twitter E-mail

General

Target

Loader.exe
Size

1.4MB
MD5

69b5b081c67b78f1dbba87013c973d9d
SHA1

4e7074a358907e8958150b760f6b749313676ebb
SHA256

d50cc74d84d32878b4dc341c7376e5ce34251ef96e4fd28fdb0346b8d064364d
SHA512

bb70b344bf439de80356b6e18a48e3c3bcd86f7472dd1b3cf4364c4c7346469ad329fb82fdb2ba84c06ff92710222991b85e7e8d1cd64c47bfb63a45c710aaec
SSDEEP

24576:RUI1edW0BiFcAnOULeBeqIdnDc0Uci875VjtAyJo:KIOgI0Uci875/A6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

Files

Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ