Vip Loader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Vip Loader.exe
Size

492KB
MD5

48274d495e61a197a6b9955b6cd14040
SHA1

05e660e0790943360125c9334bfe375a4a4a1416
SHA256

3fbbd6439b345d939c00f0dd661cbb8aedad08a0df4544fe8ab5e0388085ac55
SHA512

fca5c6b8f2e33ccc32fc0b0f36378dc3b2ae58773ee7759119064d9b9acc5e8cffa8f0a7ec7bc6f8d7a9f5823e2d2c820ade2727a090896e64a34b8339a622fd
SSDEEP

12288:93XlsajvHUMkVBrhMUYpmsQrWmwXoqkScRY/3F+yA:4arU+pbQr7y4Y/38y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vip Loader.exe

Files

Vip Loader.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

PLZUY
Size: - Virtual size: 748KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

I91MN
Size: 489KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE