xzfb982ubf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

xzfb982ubf.exe
Size

202KB
MD5

dc1a5f9a5805424f8fb60e9836879f81
SHA1

b79ffbfa0c53ff01c75e4fdc41f93e5b0ecd343f
SHA256

1dd11522f780e9d0fc5cd621becb8614c41c439682ff5cbdb4485a30b3db7d16
SHA512

fee475989ac9dab8b821fad96f0f3d1788f8d1c338a0fc2af92788dff792e095ca5ba451dee9c8d3b19889baa6550beca479b3a8a1925f7ef8d7b3c45ea8df10
SSDEEP

3072:nwBfNcRW7GeqmKEm6WuPRbiz8METc3zPp8l9OjbAjk/ppj6TF:nFg3qbvbFzJETMLql9OjfjM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xzfb982ubf.exe

Files

xzfb982ubf.exe
.exe windows x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.weqg
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE