The IGILoader exe File Malware Analysis

The IGILoader.exe File Analysis

Updated 1 month ago

Checked by Malware Check

IGILoader.exe

Hash Type	Value	Action
MD5	cc27ccf801306b1c07e4a8f14bf448b6
SHA1	6ed347e445fccaeefb06e558b9fb496d9e450a0e
SHA256	93c2b00df54ede6ad5e4d80b2f671863533bc17dbf3243a556979d8148cae9d2
SHA512	0e820ba3de8f296b0c9ef04253dfd902b70df0956da1cc3b4a9941959d4b3af369b0905ed052351eefbe313318bd18eecbeaff484f99ce54c680e51573a2aa85
ImpHash	451d4d0383a651a76d93101e06ecd3b1

Hash Type

Value

Action

MD5

cc27ccf801306b1c07e4a8f14bf448b6

SHA1

6ed347e445fccaeefb06e558b9fb496d9e450a0e

SHA256

93c2b00df54ede6ad5e4d80b2f671863533bc17dbf3243a556979d8148cae9d2

SHA512

0e820ba3de8f296b0c9ef04253dfd902b70df0956da1cc3b4a9941959d4b3af369b0905ed052351eefbe313318bd18eecbeaff484f99ce54c680e51573a2aa85

ImpHash

451d4d0383a651a76d93101e06ecd3b1

PE Analysis

Basic Information

▼

Image Base	`0x00400000`
Entry Point	`0x00401265`
Compilation Time	2010-09-16 18:38:05
Checksum	0x00000000 (Actual: 0x00009855)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB Path	`f:\OtherFiles\Perehvat_API\StalkerLoader\Release\StalkerLoader.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	2 libraries KERNEL32, USER32
Exports	0 functions
Resources	0 Resources
Sections	3 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	20,036 bytes	20,480 bytes	6.54 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A7FF5FC43663504E3F5EC5A66BA6783C`
`.rdata`	`0x00006000`	6,330 bytes	8,192 bytes	4.16 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E747697758012D3B901F5ACB5D7C9386`
`.data`	`0x00008000`	4,408 bytes	4,096 bytes	1.52 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`2087E4F87FC6A40A626FD6666022A182`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

File Name	IGILoader.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.230.174
Database Version	2025-12-06 16:00:18 UTC

The IGILoader.exe File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification