vxlang[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

vxlang.exe
Size

3.7MB
MD5

22e719d98b967f59ae65f4a4d94a3f1b
SHA1

8eaf94546ac8f5ed6e13c2824f3a0d1dcee4bdc1
SHA256

f3698ced2ab781e6cbbb7efbe64a48d7628bfbe17ad199b0b94638cf793e2c9c
SHA512

0092ab7917bef8aa23a5c556c832b0d0614222fbeef51a1212489172eb13b9e3dff261cd365760f1a101dfb517fe559645d00f2e682e3329c7569f9c8df5be0a
SSDEEP

98304:Je20Gjp5pnWD+vkMwbHA1BUoV/fseldHh:Jd0GJnWsysN1fseldHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vxlang.exe

Files

vxlang.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

_0
Size: 3.3MB - Virtual size: 10.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_2
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_3
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_4
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ