Loader[.]exe | Triage™

Resubmissions

08/07/2026, 08:19

260708-j797lses4l3

08/07/2026, 08:09

260708-j2fqtacz3s3

Sharing

Copy URL Twitter E-mail

General

Target
Loader.exe
Size 5.1MB
Sample260708-j2fqtacz3s
SHA256 843eb7fe04a849bbb23b976addf3946ef37c0ab01f3067b05f2a1a858f93aeda
MD5 a0cb2766ae63a2a9a035d16abf4637dd
SHA1 7c2ecf7aed0330ebb1c64d8d4cfce2ea353ed4e7
SHA512 a8b257bde4665dd4c11394a319cd782830b6f71f20135b2f7c0dea602d5595407ac84200053deedb81950615e47207af6f7cecbb4274b037e5f1e7ee730d31b5
SSDEEP 98304:EWEbMdW5lYb+wdELIo9uPUqU+zFxwJzejtE:EdMPUqU+zFGdejtE
TLSH
T16A46E04BF3A640ECD627913CC697971BE6B17815032597CB22904A6BBF63DD09EBD320
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader.exe

File Explorer

Loader.exe

.exe 5.1MB

Loader.exe

IMPHASH 6c6a8abb331ea9b5e1a889ca2d8b0dfb
SHA256 843eb7fe04a849bbb23b976addf3946ef37c0ab01f3067b05f2a1a858f93aeda
MD5 a0cb2766ae63a2a9a035d16abf4637dd
SHA1 7c2ecf7aed0330ebb1c64d8d4cfce2ea353ed4e7
SHA512 a8b257bde4665dd4c11394a319cd782830b6f71f20135b2f7c0dea602d5595407ac84200053deedb81950615e47207af6f7cecbb4274b037e5f1e7ee730d31b5
SSDEEP 98304:EWEbMdW5lYb+wdELIo9uPUqU+zFxwJzejtE:EdMPUqU+zFGdejtE
TLSH
T16A46E04BF3A640ECD627913CC697971BE6B17815032597CB22904A6BBF63DD09EBD320
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2108520

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\sbk00\Downloads\AiRune\AiRune\RuneAI\x64\Release\RuneAI.pdb

d3d11

D3D11CreateDeviceAndSwapChain D3D11CreateDevice

d3dcompiler_43

D3DCompile

kernel32

GetCurrentProcess GetModuleFileNameW FindNextFileA FindClose GetVolumeInformationA OpenProcess CreateToolhelp32Snapshot MultiByteToWideChar Process32NextW DeleteFileA Process32FirstW LocalFree ExitProcess GetModuleHandleW CreateDirectoryA GetTickCount IsDebuggerPresent GetComputerNameA CheckRemoteDebuggerPresent GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetModuleHandleA GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress VerSetConditionMask FreeLibrary QueryPerformanceCounter AreFileApisANSI TryEnterCriticalSection HeapCreate HeapFree EnterCriticalSection GetFullPathNameW GetDiskFreeSpaceW OutputDebugStringA LockFile LeaveCriticalSection InitializeCriticalSection SetFilePointer GetFullPathNameA SetEndOfFile GetModuleFileNameA GetTempPathW CreateMutexW CreateFileW GetFileAttributesW GetCurrentThreadId HeapValidate HeapSize GetTempPathA FormatMessageW GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile WaitForSingleObjectEx DeleteFileW HeapReAlloc RaiseException GetCommState LoadLibraryW HeapAlloc HeapCompact HeapDestroy UnlockFile LockFileEx GetFileSize DeleteCriticalSection GetCurrentProcessId GetProcessHeap SystemTimeToFileTime GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW GetFileSizeEx InitOnceComplete InitializeCriticalSectionAndSpinCount ResetEvent CreateEventW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW InitializeSListHead FindFirstFileA FlushFileBuffers SetCommState SetCommTimeouts UnlockFileEx CreateFileA WriteFile ReadFile MapViewOfFile CreateEventA InitOnceBeginInitialize TerminateProcess WaitForSingleObject ClearCommError UnmapViewOfFile Sleep GetLastError SetEvent CloseHandle CreateFileMappingA CreateProcessA GetSystemInfo

user32

GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout GetKeyState GetForegroundWindow LoadCursorW SetCapture SetProcessDPIAware IsWindowUnicode ReleaseCapture SetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData SetWindowsHookExW UnregisterHotKey PostMessageW ClientToScreen GetDC SetWindowPos SetWindowRgn CreateWindowExW ScreenToClient CallNextHookEx GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow IsWindow GetKeyNameTextA GetAsyncKeyState DispatchMessageW SetWindowLongA BeginPaint GetCapture GetCursorPos ReleaseDC UpdateWindow SetParent DestroyWindow MonitorFromWindow EndPaint SendInput DefWindowProcW FindWindowA TranslateMessage UnhookWindowsHookEx MoveWindow RegisterHotKey MessageBoxA MapVirtualKeyA SetWindowDisplayAffinity PeekMessageW SetCursor PostQuitMessage GetClientRect UpdateLayeredWindow

gdi32

DeleteObject GetDeviceCaps CreateCompatibleDC DeleteDC CreateDIBSection CreateRectRgn SelectObject CreateRoundRectRgn

advapi32

RegCloseKey RegQueryValueExA RegEnumValueA RegOpenKeyExA

shell32

ShellExecuteA SHGetFolderPathA

ole32

CoInitialize CoCreateInstance

msvcp140

_Cnd_register_at_thread_exit _Mtx_init_in_situ ?__ExceptionPtrRethrow@@YAXPEBX@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z _Mtx_lock ?__ExceptionPtrDestroy@@YAXPEAX@Z _Mtx_destroy_in_situ ?__ExceptionPtrToBool@@YA_NPEBX@Z _Cnd_timedwait ?_Syserror_map@std@@YAPEBDH@Z ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z ?_Throw_C_error@std@@YAXH@Z ?_Xbad_function_call@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z _Query_perf_frequency ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z _Cnd_do_broadcast_at_thread_exit _Cnd_init_in_situ ?__ExceptionPtrCreate@@YAXPEAX@Z _Cnd_unregister_at_thread_exit _Mtx_current_owns ??0task_continuation_context@Concurrency@@AEAA@XZ ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ _Cnd_wait _Thrd_id ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ _Query_perf_counter _Xtime_get_ticks _Thrd_join _Mtx_unlock _Cnd_broadcast _Cnd_destroy_in_situ ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Random_device@std@@YAIXZ _Thrd_detach ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z _Thrd_sleep ?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ _Mbrtowc ?_Xbad_alloc@std@@YAXXZ ?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ ?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ ?_Getmonths@_Locinfo@std@@QEBAPEBDXZ ?_Getdays@_Locinfo@std@@QEBAPEBDXZ ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Xlength_error@std@@YAXPEBD@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

msvcp140_atomic_wait

__std_atomic_wait_direct __std_atomic_notify_all_direct

dwmapi

DwmIsCompositionEnabled DwmEnableBlurBehindWindow DwmGetColorizationColor

setupapi

SetupDiOpenDevRegKey SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyA SetupDiDestroyDeviceInfoList

winhttp

WinHttpReadData WinHttpOpenRequest WinHttpSetOption WinHttpCloseHandle WinHttpReceiveResponse WinHttpSetTimeouts WinHttpConnect WinHttpCrackUrl WinHttpQueryDataAvailable WinHttpSendRequest WinHttpOpen

xinput1_3

ord2

dinput8

DirectInput8Create

crypt32

CryptUnprotectData CryptProtectData

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove memset memchr memcmp __current_exception __current_exception_context __intrinsic_setjmp _CxxThrowException __std_type_info_destroy_list __C_specific_handler memcpy longjmp __std_exception_destroy __std_exception_copy __std_terminate _purecall strchr strrchr strstr

api-ms-win-crt-heap-l1-1-0

_msize free malloc _set_new_mode _callnewh calloc realloc

api-ms-win-crt-stdio-l1-1-0

fclose __stdio_common_vsprintf fputs ftell __stdio_common_vfscanf __stdio_common_vsnprintf_s __stdio_common_vfprintf fread _wfopen _set_fmode __acrt_iob_func __stdio_common_vsscanf fwrite fgets __p__commode fseek fflush fopen_s

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit _exit exit _initterm_e _initterm _endthreadex _invalid_parameter_noinfo_noreturn abort _beginthreadex _get_narrow_winmain_command_line terminate _errno _set_app_type _seh_filter_exe _cexit _crt_at_quick_exit _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit

api-ms-win-crt-math-l1-1-0

roundf powf sinf __setusermatherr acosf atan2f ceilf cosf fmodf sqrtf pow logf log log2f

api-ms-win-crt-string-l1-1-0

strcat_s strncmp toupper strcspn isalnum strncpy_s strcmp _wcsicmp strspn strcpy_s strncpy iscntrl

api-ms-win-crt-utility-l1-1-0

qsort rand srand

api-ms-win-crt-convert-l1-1-0

strtol strtoll atoi atof

api-ms-win-crt-time-l1-1-0

_localtime64_s _time64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

_configthreadlocale