loader_stomp[.]exe

General

Target
loader_stomp.exe
Size 1.5MB
Sample261023-asktqsbs2k
SHA256 7a2a716b8c78e6a0ab233f4faada1c23a6be952ff769a2d44d2779ace0ef1b79
MD5 9b6be2c714c622adc5222260f525a822
SHA1 4656f5e4663f929fe3bd19222fa5c2bb32af93b0
SHA512 bd0f9f6ffeaf6b0842672a7e7ef6e134f8dbc443f6f18912244025e44c96e3e1fcee4ac6b64f7c7fe6bdb66637b52eba7879c65422641c90e22c359982cb8893
SSDEEP 24576:50Q2EpuFVOkGb4sj+/8WCSLmN2a5zxFxeJlFS3OMs:SQnc6EtRY2yc8O
TLSH
T111757D1124E8EF9BC1577D71F32BC4BD48C3B46066B648D18D2ACB8F6D7A36086B8167
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
loader_stomp.exe

File Explorer

loader_stomp.exe

.exe 1.5MB

loader_stomp.exe

IMPHASH c6163bd6598562bd7622885b1f041732
SHA256 7a2a716b8c78e6a0ab233f4faada1c23a6be952ff769a2d44d2779ace0ef1b79
MD5 9b6be2c714c622adc5222260f525a822
SHA1 4656f5e4663f929fe3bd19222fa5c2bb32af93b0
SHA512 bd0f9f6ffeaf6b0842672a7e7ef6e134f8dbc443f6f18912244025e44c96e3e1fcee4ac6b64f7c7fe6bdb66637b52eba7879c65422641c90e22c359982cb8893
SSDEEP 24576:50Q2EpuFVOkGb4sj+/8WCSLmN2a5zxFxeJlFS3OMs:SQnc6EtRY2yc8O
TLSH
T111757D1124E8EF9BC1577D71F32BC4BD48C3B46066B648D18D2ACB8F6D7A36086B8167
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

loader.pdb

kernel32

CloseHandle CompareStringW CreateFileW DeleteCriticalSection EnterCriticalSection ExitProcess FindClose FindFirstFileExA FindNextFileA FlushFileBuffers FlushInstructionCache FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEnvironmentVariableA SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualProtect WideCharToMultiByte WriteConsoleW WriteFile

Sharing