loader[.]exe | Triage™

Resubmissions

24/07/2026, 15:01

260724-sd8lcsha953

24/07/2026, 15:01

260724-sdy2xsha933

Sharing

Copy URL Twitter E-mail

General

Target
loader.exe
Size 36KB
Sample260724-sd8lcsha95
SHA256 ef572864837bca37db3afdaaf8c83d3a073f5faf52559fb5dc432246cacbdba8
MD5 f1c86c931936c6730e5f4a3f85415f40
SHA1 74ce65c5a9d45582dd20bdc45847727c3c668518
SHA512 f3bd948f44d082d017e8993dbbaac6cfe4f9221b760205f0aa572301c7532911043e4b3528e3e5c13d56ebd6871d16ae74e92fc356fa0720cf902cc7fc65a1cd
SSDEEP 384:slgSq9AwZxzNQb8kVbBa8v4oGQucLRCK2p3LB2ljSLgYsTJXHj6sVHnTeeRuZoiT:m8IcglmcYmJXHjvHnTeHKXgTerHeH
TLSH
T123F2952ADE17A06FD3598D79C9574D05DF227CCACBD1B9CF67410CE208A5BA49F3A202
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
loader.exe

File Explorer

loader.exe

.exe 36KB

loader.exe

IMPHASH 17d2479541012cd926536117e74f4135
SHA256 ef572864837bca37db3afdaaf8c83d3a073f5faf52559fb5dc432246cacbdba8
MD5 f1c86c931936c6730e5f4a3f85415f40
SHA1 74ce65c5a9d45582dd20bdc45847727c3c668518
SHA512 f3bd948f44d082d017e8993dbbaac6cfe4f9221b760205f0aa572301c7532911043e4b3528e3e5c13d56ebd6871d16ae74e92fc356fa0720cf902cc7fc65a1cd
SSDEEP 384:slgSq9AwZxzNQb8kVbBa8v4oGQucLRCK2p3LB2ljSLgYsTJXHj6sVHnTeeRuZoiT:m8IcglmcYmJXHjvHnTeHKXgTerHeH
TLSH
T123F2952ADE17A06FD3598D79C9574D05DF227CCACBD1B9CF67410CE208A5BA49F3A202
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15744

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\j\Desktop\loader\loader\x64\Release\loader.pdb

msvcp140

?uncaught_exception@std@@YA_NXZ ?good@ios_base@std@@QEBA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xlength_error@std@@YAXPEBD@Z

ws2_32

accept closesocket recv listen WSAStartup WSACleanup bind socket send htons

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy memset __C_specific_handler _CxxThrowException __current_exception __current_exception_context __std_terminate __std_exception_destroy memcmp __std_exception_copy memmove

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback exit _initterm_e _c_exit _exit __p___argc _initterm terminate _get_initial_narrow_environment __p___argv _invoke_watson _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

QueryPerformanceCounter RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetModuleHandleW RtlCaptureContext GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead