Loader[.]zip | Triage™

Resubmissions

16/09/2026, 10:20

260916-mdbnqsae547

16/09/2026, 10:18

260916-mbxs7awzav7

Sharing

Copy URL Twitter E-mail

General

Target
Loader.zip
Size 21.3MB
Sample260916-mdbnqsae54
SHA256 abdb9b99ed8e03869efb7645d06842a70825e248679304d243b9266ca34335bb
MD5 869af16f198d99fd06a0c18c5b624050
SHA1 f0a6dbffac5e129eac6755b915d9270f5e466912
SHA512 2b5ec277f17f4bcd0c44b2bff0d61c9319ee3a8042677d4807b9a64c08530bb464f0f0d622bf1eb3638a7d17501773b9b7e7adfdcd0ec529a78d99ac749d7479
SSDEEP 393216:BDkXrGJShzHbgrekvRx/cXal7cgRv/mXEI2UwRhNK4aJmGMF9u308xBjK/PMKyVA:BDkX6JShbgekLwatc2QEI2UwRO8Gqc3+
TLSH
T1533733D6017F8909686DD06E48C21889714586D78B9F0DECDDCBC18710ABEF36399BFA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Loader.exe

File Explorer

Loader.zip

.zip 21.3MB
Loader.exe

.exe 30.7MB

Loader.zip

SHA256 abdb9b99ed8e03869efb7645d06842a70825e248679304d243b9266ca34335bb
MD5 869af16f198d99fd06a0c18c5b624050
SHA1 f0a6dbffac5e129eac6755b915d9270f5e466912
SHA512 2b5ec277f17f4bcd0c44b2bff0d61c9319ee3a8042677d4807b9a64c08530bb464f0f0d622bf1eb3638a7d17501773b9b7e7adfdcd0ec529a78d99ac749d7479
SSDEEP 393216:BDkXrGJShzHbgrekvRx/cXal7cgRv/mXEI2UwRhNK4aJmGMF9u308xBjK/PMKyVA:BDkX6JShbgekLwatc2QEI2UwRO8Gqc3+
TLSH
T1533733D6017F8909686DD06E48C21889714586D78B9F0DECDDCBC18710ABEF36399BFA
MD5 SHA1 SHA512 SSDEEP TLSH

Loader.exe

IMPHASH 0bc1b1e557f4a4387777840b7c7925ef
SHA256 7e90da571a85dcae35ac303a78983532216ab7ca9cef94d58e19008804706777
MD5 60a37382443ed6a8c3bfd5c871dd59f0
SHA1 a2a8c8968127793a9c5243e650888527d5bef3d1
SHA512 7e5c9d2bf203505ff539a5060bdf84a5a0b11c93282a86b42f729fb0a349ef7188ad18a3e33bcc22f93fcf3b2da270b6161b1be074558bf03d289cd3b95b9082
SSDEEP 393216:o1nIF8lvRpSiEcNJECDECs5iYCOLYgCig8sQeNut5AVnDii6Ss1DT9SfhVEBhz:oZICpdICahDLBtVbD1DT9SfhMhz
TLSH
T1F1670164024DE288741F4735F3E0EC3FF2E8349A737AE9E9AC3991D764513C292A9587
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

187KB

Virtual Size

187KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

30.4MB

Virtual Size

30.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

568B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Loader.zip

Loader.exe

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

generic