SimpleLoader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SimpleLoader.exe
Size

49KB
MD5

fd57f8d2288f8070c5a40532828935f2
SHA1

8830faa45fc6ae5aeb7409c3fbd7351cb9b1fe0f
SHA256

8ccc50e113d272d5431ff456117eaa99a77180428c4992ac73a43c497f9f42eb
SHA512

c80e6cfc8f1edc18f0b9bc83adbb25abf1d3fe5f501cac215d40a5fd98d2d1979973d09d731553196ce07a05b1f5ec28f20c996fde2af70f388752b4d04776f3
SSDEEP

768:U6cKeo93sP0QRB/HqdlT4w3s/Ek0QRSCiwP3UImwNdwNMztYcFOKc6K:Xeo1QRVqdrQRSpUEhwNdwNMjOKcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SimpleLoader.exe

Files

SimpleLoader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\owen\Desktop\SimpleLoader-master\GitHub SimpleLoader\obj\Release\SimpleLoader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ