Static task
static1
Behavioral task
behavioral1
Sample
tload.exe
Resource
win11-20240426-en
General
-
Target
tload.exe
-
Size
12KB
-
MD5
116d09a05a4bd0a5c8ddec1c2a1b031e
-
SHA1
6365da89ba505c8e9882b12be4cf0b4c738e12e0
-
SHA256
c503ece807a110cff7211e6e3a777d24576aa5ad1a0a6856f85da2c4dab4b038
-
SHA512
e7659709d90987f9833533424a9a5cff2a2040ed556d93694d443ac21f57f9266791a1634b38f4ef9b36b6f761e4fd647719a6057bce6c998736ce7b496e50b7
-
SSDEEP
192:vs/6z0r1WQWnWJe2AdNJJfpOrScZqG/3CK:vs+0rUQUWPWTpOrScQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tload.exe
Files
-
tload.exe.exe windows:5 windows x86 arch:x86
9098de9a1e05bf7c7db25d4b3e56bcaa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr90
_decode_pointer
_except_handler4_common
_onexit
_controlfp_s
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
memset
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
srand
rand
_invoke_watson
urlmon
URLDownloadToFileW
wininet
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
shlwapi
PathFileExistsW
kernel32
CloseHandle
InterlockedExchange
CreateMutexA
GetLastError
ExitProcess
GetTickCount
WriteFile
DeleteFileW
CreateProcessW
ExpandEnvironmentStringsW
CreateFileW
Sleep
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedCompareExchange
user32
wsprintfW
shell32
ShellExecuteW
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ