Loader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Loader.exe
Size

44KB
MD5

62459a88480a21f4bd7202621d65cebc
SHA1

d2ddaf19f6f3b4b1e06fc813540da1dc23d39e7a
SHA256

47e9cdc85343ebb5b25a9d767ad78ac36aca4431fa2dab6da49af98f93433e81
SHA512

1feec6afb52d90f2dfb22ea415ada79338344c3e424bb20c3b80b1e5093ec0b7bbddf682869b287883c8247945898f1ec17a3ff10e4c8db5237e1dcb9ce216e0
SSDEEP

768:YKcq8O1xz+EopdfZZzuAoCSikb4be1T2IvIuAy74/sHdyCzFCTtYcFwVc6K:YKcLOb7opdRZ6hVkbET2IvIzyGsUCzkR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

Files

Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ