Static task
static1
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20240802-en
General
-
Target
Loader.exe
-
Size
1.4MB
-
MD5
b524fe05b77d92787cd7e645f187a748
-
SHA1
e1c2d5b8c48521826550cf5c04c5dcc0d7c9914d
-
SHA256
e57f3efaba488d392c66f31883f8d697652093ab73675a05a7f982ea80f5ad82
-
SHA512
7b9113f71956bd4d46772312af6f2bf94cf5dd961064dd072b66306803f50e7af882861e200a4ddf2ce5cbf0ee7f378494844cf0b1c8d5604d6861bce9822ab7
-
SSDEEP
12288:h2SFIaZJvUd2q94IZR0O7/xXSKGOOb1haKbQ3z2jzBSN0FMTz7QOSJB4MDWHDbUn:h2mIaZ68kVLae1Nw1jX2aOfZJipFtYN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Loader.exe
Files
-
Loader.exe.exe windows:4 windows x86 arch:x86
Password: 1515
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ