Loader[.]exe | Triage

Sharing

General

Target

Loader.exe
Size

874KB
MD5

f307b3248287355b861ca41feb4224f8
SHA1

f43f9fcce3d2152695a9d52431f63f62dfa38b9d
SHA256

c9cc1b0f14b8ce0ba87f1db17e39e30157705b6f3c4d7068a37c1d8da7efd669
SHA512

1e6e8be34d4f10c5535aa8806c21dd38af02934b721fd6524076c3345e4a11f5011fcaee69d9cdb45407d7602080861a9dee2708e2113f8ec0cb3e935bcec7a4
SSDEEP

24576:soCu95GsiEjfxQ4R1hGkUb2RDiqofhjmip7iIs:soC85GRGmczUbqoZuIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

Files

Loader.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

OADIS
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

FDSFH
Size: 871KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE