www[.]loader0000000000-obfusecator[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

www.loader0000000000-obfusecator.exe
Size

160KB
MD5

35639372ceb1ba1f501a17179682b0c5
SHA1

85a9f0840d8d1203e2a3fad9ebd7bbf242e78c1f
SHA256

8e8425c8745807cc489b8973101cb612912aa4002e25b74b7f636a3e0512996f
SHA512

bf57c440fb167473fdc5898d7a152605898349ba948866d4739f064c90d2af1546b4e29d5bf608bd470988c0aa4a38c210a2f3c761ae2c64dabcc421faac4826
SSDEEP

3072:gGl/HBHIJ3FgY8ukL+mKNs0gVhmp3++O:gGtRIJ1gYeLRKCpQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
www.loader0000000000-obfusecator.exe

Files

www.loader0000000000-obfusecator.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ