loader_txn[.]exe | Triage™

General

Target
loader_txn.exe
Size 1.5MB
Sample261023-asd17aa18m
SHA256 ac6cbceb1da8fcb0e8afe9e661d180735f6238c27d18fc655232e6e5b48d2832
MD5 5c91bf1a743e45f9fc0ffafdc9953e66
SHA1 07d13edd16456c06dbee0273e501a036125b156c
SHA512 64e76d555650c90e6bed44ecaf669a945b1d16defe07b461652253b8c8a99960f8907c25a5e99d6d2381bbca3797c5502dc73eb9e8fe5f45fdd6bc47442b0041
SSDEEP 24576:Jo8qXEpuFVOkGb4sj+/8WCSLmN2a5zxFxeJlFS3OMs:Tq0c6EtRY2yc8O
TLSH
T142757D1124E8EF9BC1577D75F32BC4BC48C3B46066B648D18D2ACB8F6D7A36086B8167
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
loader_txn.exe

File Explorer

loader_txn.exe

.exe 1.5MB

loader_txn.exe

IMPHASH c6163bd6598562bd7622885b1f041732
SHA256 ac6cbceb1da8fcb0e8afe9e661d180735f6238c27d18fc655232e6e5b48d2832
MD5 5c91bf1a743e45f9fc0ffafdc9953e66
SHA1 07d13edd16456c06dbee0273e501a036125b156c
SHA512 64e76d555650c90e6bed44ecaf669a945b1d16defe07b461652253b8c8a99960f8907c25a5e99d6d2381bbca3797c5502dc73eb9e8fe5f45fdd6bc47442b0041
SSDEEP 24576:Jo8qXEpuFVOkGb4sj+/8WCSLmN2a5zxFxeJlFS3OMs:Tq0c6EtRY2yc8O
TLSH
T142757D1124E8EF9BC1577D75F32BC4BC48C3B46066B648D18D2ACB8F6D7A36086B8167
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

12840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

loader.pdb

kernel32

CloseHandle CompareStringW CreateFileW DeleteCriticalSection EnterCriticalSection ExitProcess FindClose FindFirstFileExA FindNextFileA FlushFileBuffers FlushInstructionCache FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEnvironmentVariableA SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualProtect WideCharToMultiByte WriteConsoleW WriteFile

Sharing