xam[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

xam.exe
Size

2.8MB
MD5

ee826a11eec5f15201aa12168ab8f6b1
SHA1

de92d7e6c70439e283801a592ff200eae0ca781f
SHA256

c0e2e1e4d71c468132bab2cb332f3bf7b16aaa2a032e47ca88065e05ff7e2724
SHA512

7719f5581e5b3e351beab5ae0c75d47ad5d433d77f60767a263307bc2288dd280fec132a243e081d3ce9fef4fa5bca1fbde0728c86e72a65f26b86fa7c339812
SSDEEP

24576:opoqmGUNhs+VxEB8dwyGrI2SsMOaCNBOU6J0RyVHihL:19GUyBk2SsMO9B5l

Score

1^/10

Malware Config

Signatures

Files

xam.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ