XLOADER[.]exe | Triage

Resubmissions

27-01-2025 22:06

250127-11h8zsxkbx 10

27-01-2025 22:03

250127-1yqv2sxjdw 10

27-01-2025 22:00

250127-1wzeeaxnek 10

Sharing

General

Target

XLOADER.exe
Size

165KB
MD5

35faa4d7d6a4ce2d4af4c66f42547af7
SHA1

e844d33f3bd11f49822e0314732c7a13e9ee8e29
SHA256

ef1737d52757e66af3d80c1a64ee974236f011783cb54960a1f6adc5a47386fa
SHA512

baa7c5a212dff66fedbf6ed3325ad3cd9dc17831a35450125a63ebecd735df1a16ce4362c6e8518586b6f5895b3950f4573cf8721e55a9fcc67d1fddb35ea3e2
SSDEEP

3072:LrLWKPAfXXXMaaJBGye1k07+X7hje/MbuYDDs6POkfEKVRuLS:LuY2XSJB7e1LIwEbDDBmkfEK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XLOADER.exe

Files

XLOADER.exe
.exe windows:4 windows x86 arch:x86

Password: 1

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ