Static task
static1
General
-
Target
xdeltaUI.exe
-
Size
79KB
-
MD5
190cdda412278f6f589e34eb636f06d6
-
SHA1
02411b83733cb5c22457162de8aaf55e1cd6e228
-
SHA256
6632e97a3b9edb6374608706a32ec67ae02d4e491f4bc8e66220f52dddcfbe2e
-
SHA512
d76e950b410e8fc3c1f455e8dd072fef9ca79c99e84fa20c2bee1b8d840da798d204d11640297fc2c5e8909a0a02d8b1743b2a2debeee75c7029b5567ecc1187
-
SSDEEP
1536:TJszRe40vVhOuWGqRzbBa3kGFf40vVhOuWGiRz:TJszRl0vjUbBokGFw0vjc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource xdeltaUI.exe
Files
-
xdeltaUI.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ