VoidWareLoader[.]exe | Triage

Sharing

General

Target

VoidWareLoader.exe
Size

389KB
MD5

c4f8e3928330c23aec66407fda0f5c48
SHA1

5d199fce684232470a75f9a988644014f57deb9d
SHA256

22b79127b800d2098b2e61418298b35069308a6babc4d443eb16b68dec8a8cf1
SHA512

b6e5744f88d70e69f5dcbbe9cd153dd6142247c567f29627f7ce760ea4c3d3245d19dded6df16e0a4c524a27857577121e571571e2246157925619128ec79848
SSDEEP

6144:Tq2PkdJCnKPsPwcSdej3IMX1tr3MmuPkdJCnKPsPwcS/ej3IMX1hr3M7xq:NPvKPsAq3IMXXrFuPvKPs2q3IMX/rgY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VoidWareLoader.exe

Files

VoidWareLoader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\dzoni\Downloads\loaders\VoidWareLoaderLite\VoidWareLoader\obj\Debug\VoidWareLoader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 190KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ