Loader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Loader.exe
Size

384KB
MD5

bf55376300ac3e83943d6b654918ade1
SHA1

d7e40b821d603038895ce62b3440d2eb2cd8b499
SHA256

e63ff36d6058535f79b07c56f5ab9f56a5e4936369f070c807c5ffc0d145600d
SHA512

d9a49ca1d02cf0335cb566291fc1307152009958392297685687b949a5fd7aaa3f69d3b8fda0a30f6598c581f73a3cf99b096e80930b54f4473037a45bbfbdb6
SSDEEP

6144:ocakYrOakvJLYyzw7bysB5rEaeWdGRY9rlzLYV4xcUeUJNqWBA5YF1V8D:PaSYy8iM5QaeIxvYV4xc6yyA5YFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

Files

Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ