Loader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Loader.exe
Size

284KB
MD5

0449a09b8ca2463228bc7c57f107323f
SHA1

17268611e520840ac9d8bbd9138a6fcce830d594
SHA256

47895707738b096ff9836a863cf7fa51483843e58760f188c1a96c5e73800b32
SHA512

79659c19a3cc8580f70dc455a26ed36ec2dcef059ad58fc16ca5cc817ba232f84184bc9ff14571787a6c82ba36fd0b19e96a97cececc845d21edfd9f7d269c44
SSDEEP

1536:SecHDzbJf6qGXfFHfrXEvIzVAXuiRp6EE8bMlnEfwGzod8MddBK1OhFQsbICQIaV:Fc/bJEbpxiBYe1oUJ2hsOFlD6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

Files

Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ