Loader[.]exe | Triage

Sharing

General

Target

Loader.exe
Size

729KB
MD5

15b59d4eb415f44c300bf5425795d1c7
SHA1

da1f813d3a5b4842db8fa45ceb37e0f90451935e
SHA256

7f9c961f3c5c1693672ff1d4d71ed92dc29df2326934ae32de76ffce8db96c2e
SHA512

03ea3f8053bbe94eae1a2ae32e8bc8eddee9787b2ad810babc7af091050d59fb6a4dc24ece238970ad427350fb2a613886155e7eef4ab52672779020b4b4c580
SSDEEP

12288:EgXHq/MMXrgkPVjeZlyfibyu0jgHyUWFWjLH3rEBp7LPVneoR6NXph+CexvZP3dq:XXHq/MMEPKiojgOF6Lbk72Xph0xvRN6z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

Files

Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 726KB - Virtual size: 726KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ