ST_Internal_Loader[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ST_Internal_Loader.exe
Size 15.0MB
Sample260809-wqredsbm2y
SHA256 0153747ea9100eb2aa8d2b76a5ddf73d51a770c8c2f88e1430a8434dcaf3160a
MD5 119e179c4c9cbaaa1bb21c7157dc6822
SHA1 9c740f35e9bdcf65f1b5e3e9e1156fb381519f95
SHA512 e59f3414c54b293308aad33ed87637f98e489a01f049707619448453ab9030a2aeda19ad4854be52464b7510544a94aab7026667e10ab0d468e28bd834cd5bd5
SSDEEP 393216:fD90+wLedGJlCTKVwLGg/1Xo6gMxLPhpfE7vE0akDyPo:r6+wLk2CT4QGg9XnHxTnc7vE0aKyPo
TLSH
T17CF633804F533D64ED9C237559AC956C220E81AB04FDC7B59A3639FF6EC9E6D010A8CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ST_Internal_Loader.exe

File Explorer

ST_Internal_Loader.exe

.exe 15.0MB

ST_Internal_Loader.exe

SHA256 0153747ea9100eb2aa8d2b76a5ddf73d51a770c8c2f88e1430a8434dcaf3160a
MD5 119e179c4c9cbaaa1bb21c7157dc6822
SHA1 9c740f35e9bdcf65f1b5e3e9e1156fb381519f95
SHA512 e59f3414c54b293308aad33ed87637f98e489a01f049707619448453ab9030a2aeda19ad4854be52464b7510544a94aab7026667e10ab0d468e28bd834cd5bd5
SSDEEP 393216:fD90+wLedGJlCTKVwLGg/1Xo6gMxLPhpfE7vE0akDyPo:r6+wLk2CT4QGg9XnHxTnc7vE0aKyPo
TLSH
T17CF633804F533D64ED9C237559AC956C220E81AB04FDC7B59A3639FF6EC9E6D010A8CE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24449112

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

62KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

14KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

11KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

424B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.winlice

Size

Virtual Size

23.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

14.9MB

Virtual Size

14.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

16B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ST_Internal_Loader.exe

generic