Loader[.]exe | Triage

Sharing

General

Target

Loader.exe
Size

20KB
MD5

0f95fa01d6e6c6f333115a2d46d14a7b
SHA1

1b86ddb7d5d94969c6675edc696e43dd21609af2
SHA256

7520219e9843252d510fcc3687f3b7d2338b846664fc235177b39a031910af1a
SHA512

873ebedc66a511d69e796b8556bc869f4636b9796fd4ec2acc84487853ebd6b710188c7b783e54d4193d0420f8f0b055b2e003fedfddbd1c1195ad6fc91324fd
SSDEEP

384:KkOZIBjz05rih1scK0zAM2JbCt0CkTrCmeC/v+:KkOiBjqri0WAMwbJDrMCX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

Files

Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ