InxLoader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

InxLoader.exe
Size

3.0MB
MD5

4523a92c70e032fdc43f0b3d38412fe1
SHA1

a9a5049b5d602c6e3af1e7247f09c2ff6bb9b38e
SHA256

3c6611176dd4e238f7c4ca280a6ec833c034fa4dc04bc514466b6fd715619eaf
SHA512

1c1bfc4087217ac82ffb4d13b08e225e247efc3342d2b7ee8192053b53633b1e85ae9bde5feed7f262fcb107e1495d5605ee4db1510c28f075cbe8a2ef3c80a6
SSDEEP

49152:NLZqtnsAQcHuVbeyVKOELmKZZDIcQXzzcI82rSjk3j0CbiDaaPCwTx/gXArIfA65:dZo/DOdeQ2YDzM2rSKbGa+lgwkbcyM/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InxLoader.exe

Files

InxLoader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

'vtX
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ