Static task
static1
Behavioral task
behavioral1
Sample
scan0002992, xlxs.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
scan0002992, xlxs.exe
Resource
win10v2004-20220414-en
General
-
Target
81f47363dc2137c3c6098589833077bc64c4531668d278b93e515ffcfb547303
-
Size
784KB
-
MD5
f0904f0e7805e84c9ca0b12236f717ea
-
SHA1
7a0725bbaf47687b877f6ceb63dfa695f1d6197e
-
SHA256
81f47363dc2137c3c6098589833077bc64c4531668d278b93e515ffcfb547303
-
SHA512
fb89583439b006add490d2c79395ca33f3cdb8492e31a21656c32896fe64c8307a4dc74bfbfd2052b2ab14535b5c6194896f21db5cc4d1ce3dcd60aa01febcfe
-
SSDEEP
12288:qOg3tGpppppppp/pppppppppppppppppppppppppppppppppppppppp367N+iclv:qO07wlQu3V1/Ot6J0c
Malware Config
Signatures
Files
-
81f47363dc2137c3c6098589833077bc64c4531668d278b93e515ffcfb547303.iso
-
scan0002992, xlxs.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 627KB - Virtual size: 626KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ