loader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

loader.exe
Size

874KB
MD5

b7262f73c1993019141240f517f213f1
SHA1

1fdc0a0d3ab816f0c39e217ff9cdfb377d6bf496
SHA256

a182a17c74c79e1c79d084ba88063ef54701d2de64b59a8f87f51dbc4f2cdcc5
SHA512

0ae49fad02f1dec78ab2d92e97dece6a11fa93abeb5b50cdb8c38cd5716bc5412b05c2044de2371ab2790c7cdf0010a225d025dc5d1539be26ea3a192ac1ca74
SSDEEP

24576:tkC4kHSsWMMeqUoCCyJ97ddVoxBo/Zn0+9S:tkC5SD8qUoCtJVdrCIZn0+9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
loader.exe

Files

loader.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

ASDAD
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DSFGR
Size: 870KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE