bad[.]xxe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bad.xxe
Size

657KB
MD5

8a4d212420169a0959cf3a769eaf6714
SHA1

df280cd5404b48a446a554a6ab208b57f17365da
SHA256

8129f76ee668321e80a4402201e145d683ec5ecd440b5b784cf0c60885229d1f
SHA512

9268c3b8561476e8ec90360af15a78759692b0eba514be5a19563037f158db0bc7352b352de8778b096a611c566a72f04a54e89f00880e80beeb1aa03f4af06e
SSDEEP

12288:WL3rID3gzsFxcWp+dKIQdaBZK72DpAV/hjeo9oJVYBGz70PXJQIvpxY3+eSZpUHt:EcD3gzIKjdjsYCJqGonYBGzWQKMeZpUN

Score

N/A

Malware Config

Signatures

Files

bad.xxe
.zip
Cargo-Notice-DFHGXGT.scr
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 789KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ