Loader[.]exe | Triage™

General

Target
Loader.exe
Size 3.1MB
Sample251203-tmlzdssqcn
SHA256 4dbdb20f155314cc024c0dae1fa82e421516e5cb9075e7bdb12f6dfca2eaa2e5
MD5 f157efac383bac30af4319294015cfd9
SHA1 e33c14aee03ddf391447f481a18db547cac4ba01
SHA512 ea2ee6645ee55f9309dd60f47adfeb42112957806ef5595d5030a146c97596030a73a1ea6a8f56c907cd862bad9ac5bf8b2dad6288493be28a305443587df990
SSDEEP 49152:rElBWngSpk8sK4clKjjk2lhncukKr56uweKscYGsqI245RpoOECa8OwmiI:uBWnvk8gc8LlKu756JeKscYGCG7Lw6
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

SHA256 4dbdb20f155314cc024c0dae1fa82e421516e5cb9075e7bdb12f6dfca2eaa2e5
MD5 f157efac383bac30af4319294015cfd9
SHA1 e33c14aee03ddf391447f481a18db547cac4ba01
SHA512 ea2ee6645ee55f9309dd60f47adfeb42112957806ef5595d5030a146c97596030a73a1ea6a8f56c907cd862bad9ac5bf8b2dad6288493be28a305443587df990
SSDEEP 49152:rElBWngSpk8sK4clKjjk2lhncukKr56uweKscYGsqI245RpoOECa8OwmiI:uBWnvk8gc8LlKu756JeKscYGCG7Lw6
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12093392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths