DonnyhubLoader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DonnyhubLoader.exe
Size

557KB
MD5

cc72258b7f5aacf24653fd5146ca4510
SHA1

80b6b9d46f238985f238a5d806e3c7bba13de7e5
SHA256

70fd6d3be1a99b43d325ebe7c499275084932e7158328c20a152c08c62f7af5f
SHA512

cfc5f05e95a5f0bb411a79d4610cb83d164bc3b1ff586a6c1ad10d6a404031246e1caa6829130e7748f1933c0107ab5212dccd6a76283604fa2b579fc59c5dbc
SSDEEP

12288:eO7FJJ7gIgVj2du42aLaG7FLJ7gIZVj2du42a:l7FJJMPRAu4fLx7FLJMyRAu4f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DonnyhubLoader.exe

Files

DonnyhubLoader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ