Static task
static1
Behavioral task
behavioral1
Sample
x0r-p.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
x0r-p.exe
Resource
win10v2004-20230221-en
General
-
Target
x0r-p.exe
-
Size
111KB
-
MD5
608fb76ccddbfaa8de0491f48ca11e01
-
SHA1
0c3c4312355e5c8693a501fa0ac48a3250f773cd
-
SHA256
8cb2dd7d9a734abb366f1cd1a03a7ddb0496ba3a745379e22ff2fc851e6398d5
-
SHA512
cbfbcdda52b918d91811b85d9da72622a92096576e2c05a73d983ae56b3cb8f0d98dd2adcd53246d3f693ac494df7dee5733bbb4b572ca437ce67f6703e08042
-
SSDEEP
3072:KnpQa+bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7M7jboib24HjqH:LrwvP6bQ7yMP+DE827Q3+H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource x0r-p.exe
Files
-
x0r-p.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YARAB Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE