loader (1).rar
- SHA256 c590a485c01bbf9bf39c5fc67a48989b30805317035b47f8a9c4727a428702ab
Password
asd
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader (1).rar
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
9 signatures
900 seconds
Behavioral task
behavioral2
Sample
loader (1).rar
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
900 seconds
Behavioral task
behavioral3
Sample
loader (1).rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
900 seconds
Behavioral task
behavioral4
Sample
loader.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
loader.exe
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
loader.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
General
- Target loader (1).rar
- Size 12.0MB
- Sample260730-2kc8gagg28
- SHA256 c590a485c01bbf9bf39c5fc67a48989b30805317035b47f8a9c4727a428702ab
- MD5 7bb6abd97b8a21d28d0bdc0dd5cb3dfd
- SHA1 194266ce3c10c2e18dd6444ec9910f50e907de7f
- SHA512 64e407aacb3fabdf926f1a0d1f43b9ef888ba27b34121dc300370f7531193964c3434e024f8c9b2112957485ceb05942768e004728181a7be11125849490c2e6
- SSDEEP 196608:KvjxEylTiuk+TmyLlexF8CnxwzYItvW97+AyIsPlY2OyLF1IbVy+Yon4+U1jKkCl:AlEMiukGL8xlnGzN54i/9Y0F1IR+vx1+
- TLSH T120C6330A1DEB305B6AAD7E127BA3098E2E927054FF767147122D21D71244AFDCC1CA7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/loader.exe
File Explorer
-
loader (1).rar.rar 12.0MB
-
loader.exe.exe 14.2MB
loader.exe
- IMPHASH db06c467dce77a6c99fdd8865db066bf
- SHA256 3ad44d0b739b43078efc8a7f794e58a4a27a54cb59b2bdd825fb831e9b40940b
- MD5 2c8bd22c986588212276324a75eedfa4
- SHA1 7c82ec48b98585e82c6ab0fbac0620de9ded5465
- SHA512 71e934f87122fed2dba93c217721c0de33ba0abcc412764b9db4cf49226d52bfa3c48b81fb5334ae867405cd17e2711cc872cc5a3fbb494872d68d66d5c2b241
- SSDEEP 393216:DkrteQPxAa2hPZ354oMDkQ5YYK3K4zOIOp:Dkn6P154PbYfa0OI8
- TLSH T1A2E6128569D0D6BCC8848238F24516F9F4C93C8D8DF9952ABFC758217A31D98C8B67B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
asd
Minor OS version
0
Major OS version
6
Entry point
22853103
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_43
D3DCompile
kernel32
FreeLibrary
user32
EmptyClipboard
advapi32
ConvertSidToStringSidW
shell32
ShellExecuteW
imm32
ImmReleaseContext
dwmapi
DwmSetWindowAttribute
msvcp140
?always_noconv@codecvt_base@std@@QEBA_NXZ
userenv
UnloadUserProfile
wininet
InternetOpenA
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
api-ms-win-crt-stdio-l1-1-0
ftell
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-runtime-l1-1-0
_c_exit
api-ms-win-crt-string-l1-1-0
strcpy_s
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-math-l1-1-0
acosf
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
Name
.text
Size
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
. Pb
Size
Virtual Size
8.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.Ml9
Size
512B
Virtual Size
408B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.;gX
Size
14.2MB
Virtual Size
14.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
469B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ