Loader 267.19.0707.zip
- SHA256 d256ed22d093cf81dcafe33f2025bf6c754d0e8775b19bbc4719f8471a0d35ac
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
300 seconds
General
- Target Loader 267.19.0707.zip
- Size 3.3MB
- Sample260816-vyevwsfk41
- SHA256 d256ed22d093cf81dcafe33f2025bf6c754d0e8775b19bbc4719f8471a0d35ac
- MD5 87fc4a21bfddd37ebdfcafe3c7a2d8f7
- SHA1 1d513e616725cb3c7e9e20b51ec4ccc9df815c3b
- SHA512 dc7983a304e79d512eb194ebf1656c15440c50eb84bfa766e03a28358a84a6195ba62078b52558640c975a94b1fc63c40dd4fc939bdb02d87125b71b6a23ad02
- SSDEEP 98304:DnVgZVxG6LYKPR03efU4kpAaaO+jBomE2TW:BgZVxnYKPR02pOkB33W
- TLSH T149F533DE23F98F721EF971D4F428E0AB54CB20C34AA9D1D06A2369524B8C79BC11FD65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Loader.exe upx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Loader.exe unpack002/out.upx
File Explorer
-
Loader 267.19.0707.zip.zip 3.3MB
-
Loader.exe.exe 3.3MB
-
out.upx.exe 8.8MB
Loader.exe
- SHA256 ab970bf4196f131789be4f8012a4e132c2cbeebcb23d74e3c8eec25d97eb7aa4
- MD5 eea1d3f8474498add2eafacdfb4d0d25
- SHA1 97998741b737074a3c10dbd6ef0d24d44f355f82
- SHA512 e663d7ea26d9113e1624d15d9ec16a59ef7635a5316ad21ced748008ac2fd34246de3158e083edf49c807a642a170b4099cf6cb5115353520a0bde092c492623
- SSDEEP 98304:weRNYZHYJqGU53y6jLDMlPJ8FSneP+XG4l3YSD:7NY2m3zMlP+s24lI
- TLSH T114F533FE325749A7D32DB0B4B34DE599A0C04125E9CFDD2A6E5F688221F4C84E18EB17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
10954592
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
UPX0
Size
Virtual Size
7.2MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 ebb88f7a718a366783e6948931504b840ed39fb74132c51e11a40a06f0a260df
- MD5 75304b271aa02c3059b6e80008e60b63
- SHA1 cfae3466402a4ec30c831dfeb6066e6332e2579a
- SHA512 ba0cd92430c7dd2cd803a5ee1b3a69c9be91376037585d5c876ea025a56705d7fe1bd385b0db9f1292d87c68fa3353b0c12ec0503e63d5c710d4d8001fa56bb6
- SSDEEP 98304:ZexEvMJy9pFGgbooM0bi5kAFCgH+yWPfQP:ETJGGgbXM88kAggHfSfQP
- TLSH T17C967C3AA422D99CDD029574BA68A3712EF076638F6546FBD08DCA311E171F90F34B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6071264
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
6.0MB
Virtual Size
6.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
364KB
Virtual Size
364KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2.2MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.retplne
Size
512B
Virtual Size
216B
Characteristics
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.voltbl
Size
512B
Virtual Size
58B
Characteristics
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
code
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ