ST_Internal_Loader[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ST_Internal_Loader.exe
Size 17.9MB
Sample260808-fm311styct
SHA256 bfd4c2690b113c10b2c7a800c68927f7f81383f0697e2578b8545fecd16ebe92
MD5 ce7bc571536d5c53d4bb2caa14f5c5bd
SHA1 6e3c38d1bf7b1da6e053df23e1ecca3471bcaaf9
SHA512 c5e8353fc10ed6c2a4e164c20fd44f29fd826d44e811ff0e6b5983fb7e3a4c22ff68787a760d91c2bd7ab573fa6f8d068617cecb12a2fbeed9f0d3e4b216b1d3
SSDEEP 393216:v9AdNyz71BQbhpixqgfRLghRckzwlgUciGPeXNX4wDvJ1V4n1y:ICEXixnfR0YkzkImSwDvJT4n1y
TLSH
T1251733D35E35BF4EDFCF983A3D91E24EA34DCACD0D06B6148845A7AC43854AB66BC064
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ST_Internal_Loader.exe

File Explorer

ST_Internal_Loader.exe

.exe 17.9MB

ST_Internal_Loader.exe

SHA256 bfd4c2690b113c10b2c7a800c68927f7f81383f0697e2578b8545fecd16ebe92
MD5 ce7bc571536d5c53d4bb2caa14f5c5bd
SHA1 6e3c38d1bf7b1da6e053df23e1ecca3471bcaaf9
SHA512 c5e8353fc10ed6c2a4e164c20fd44f29fd826d44e811ff0e6b5983fb7e3a4c22ff68787a760d91c2bd7ab573fa6f8d068617cecb12a2fbeed9f0d3e4b216b1d3
SSDEEP 393216:v9AdNyz71BQbhpixqgfRLghRckzwlgUciGPeXNX4wDvJ1V4n1y:ICEXixnfR0YkzkImSwDvJT4n1y
TLSH
T1251733D35E35BF4EDFCF983A3D91E24EA34DCACD0D06B6148845A7AC43854AB66BC064
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27717720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

59KB

Virtual Size

154KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

14KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

11KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.winlice

Size

Virtual Size

26.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

17.8MB

Virtual Size

17.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

16B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ST_Internal_Loader.exe

generic