C:\Users\whlke\Downloads\src\Temp spoofer source selling\Temp spoofer source selling\Temp spoofer source selling\obj\Release\Loader.pdb
Resubmissions
18-09-2024 20:16
240918-y14hta1erg 3Static task
static1
General
-
Target
Loader.exe
-
Size
57KB
-
MD5
744e6f45e5aa61c7af778e72a5a4e503
-
SHA1
51a009f906b09857fefe5b4248555f272a1558d1
-
SHA256
ca77ae7004131b69017622898c015f5e057ef65c40cc7646dc36408a4773dcee
-
SHA512
4a238417e25a144a4f90fe1ede1dfae44d74bb4403e94d7755f48255c07335cbe32f1a1c97aae8caeeb7e147ad15ebe6ede1ee59238723d257d2b2f584507a8f
-
SSDEEP
768:kHjgp6WLS3X0ipc4YaDuTyk2Rr1SpaItJJsI1UP2v95tI2DRjzaJ58SpNLgf2GF/:kHQqg51TyfrloHePW5tI2DwJbVG7LeU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Loader.exe
Files
-
Loader.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ