C:\Users\Hiorac\Desktop\idk im bored\Gamesense Loader\obj\Release\Carloader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Carloader.exe
Resource
win10v2004-20240426-en
General
-
Target
Carloader.exe
-
Size
1024KB
-
MD5
4f6b39da75b1652be712f089cff73064
-
SHA1
f03472c24382b5d13bacfd02f103c6cdd7e8f695
-
SHA256
d5f8eb0edebe70c35afa41a543c33a13476a69b34179e5b136aed4e748783ae6
-
SHA512
f8b2821855611288dc095f82ef9a96464101822326640fabb63c5179d0ec35abb7eba561291e4d386b55be0cc2edd7f5504697cdbeda32508480a46a71823db8
-
SSDEEP
12288:/B0upmUU2fP/gtKupmUU6w6upmUU5mCgtEBpmUbS:/4UUUHXUUdMUUgCmUbS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Carloader.exe
Files
-
Carloader.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 891KB - Virtual size: 890KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ