Loader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Loader.exe
Size

303KB
MD5

163032e88a28683cacc8ab96bbe5b9ed
SHA1

3e8fe07f367f6a1b1e92f772f709619f969cc2fe
SHA256

6a3d377b13fb302659c977a5c32526664a8ee903a0bb4fc913c0bfacdcde6880
SHA512

e7c864b07fa75835a43e38130df09a37ff39479957aac9d576d9a2aa21a647c4de6717983389c5f2b2388267c3503560d1b4d1a87f7bb8a7a44a15271a69fb35
SSDEEP

3072:uRMGGRPdBxkdK+RxMEREb5f+q7PpaYTMDQ+LNl79aaXOIJxxRDB128zXrjHtxrih:jGqrtTUZH79aaXpJvLtBUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

Files

Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ