Loader[.]exe | Triage

Sharing

General

Target

Loader.exe
Size

546KB
MD5

99474c45db93503a7277f7e1d5ac4e10
SHA1

9e6f8e5d268cfa9d15bb4ab28ad3f735e9fa55d3
SHA256

7e78d669e85c2735e0437967eedb9a5b7ff1f05bf72cde2a9746266ca1206fe9
SHA512

3459b7a1b068a0a1b521cd831df2f4dbf00ad0fef53905ee67277bdc2824f43abc09fa96dd0d28e034890e38c89eadb06298df806de0cb8a83398e44a4a41114
SSDEEP

12288:f8XabVpZ6/g1qARDwV3fy9ubjZu/QrkheFdPQ8vkKf93ZCHNwWuxfGLH3eBW28oj:DuNWDg3d/Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

Files

Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 543KB - Virtual size: 542KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ