Static task
static1
Behavioral task
behavioral1
Sample
Xbox Pegasus.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Xbox Pegasus.exe
Resource
win10v2004-20221111-en
General
-
Target
Xbox Pegasus.exe
-
Size
6.5MB
-
MD5
7ff026d6e4e8a9ccb1d7b7a18c30407f
-
SHA1
04e2f88f123589a1d4a17bc5b816c5dd4cea0ee6
-
SHA256
fe40b82fc0f7d2177d0328099ba41fbc5c8d605ea344c6c42b89335a11e5961e
-
SHA512
49a4846c5b6c63c425a24313c6f53a257ddf74c86c05f3a3787c901243d291410233cf1cebca48d527bcafdaa0dba7f0c385c7187e1740536a40b799420b9437
-
SSDEEP
98304:UPYUQGhpUd0eXfGIn0iUYvJK3URLnJzG+m2PhjBnTvXeX4r3WjEY2YhjgSYg/R:UrQGnw0cByURtaNiBnTvxKEY2YRgSv/
Malware Config
Signatures
Files
-
Xbox Pegasus.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ