Static task
static1
Behavioral task
behavioral1
Sample
scan0002992, xlxs.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
scan0002992, xlxs.exe
Resource
win10v2004-20220414-en
General
-
Target
49115966741915c3cf2ff0ea0298fd73d00da665eff5f5595f35957ac40a00a7
-
Size
561KB
-
MD5
0fe12aa5610cfcc6f86b7378c5e39f6d
-
SHA1
2ae0ccc66797d33959f4cb8c5f56ee401b8b7d14
-
SHA256
49115966741915c3cf2ff0ea0298fd73d00da665eff5f5595f35957ac40a00a7
-
SHA512
5f53925e007c1f4e7cff3b613417270f0a0711288481d402e093cd102bf7235aa2849d1936dfede91d7f53271adfdbd467bbb19c8007531ce83f6af6359298e0
-
SSDEEP
12288:gLKLi6kU+v2ANxzJ8UjNNR/wF5cHUc4XnYfEzD8e4:gLKwTv2ANnDR/2U4XJzAt
Malware Config
Signatures
Files
-
49115966741915c3cf2ff0ea0298fd73d00da665eff5f5595f35957ac40a00a7.zip
Password: infected
-
f0904f0e7805e84c9ca0b12236f717ea.iso
-
scan0002992, xlxs.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 627KB - Virtual size: 626KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ