Static task
static1
Behavioral task
behavioral1
Sample
XR.exe
Resource
win10v2004-20230621-en
General
-
Target
XR.exe
-
Size
78KB
-
MD5
117511ebb4bdb040f6e9f2db033f920d
-
SHA1
9f46f687f227cc079b62cb9c8bd09860a9d8fb5f
-
SHA256
29b5c7e12b5b948de1c799e63a0dbe0dd2f620dd53fc8050180c63a4b78907dd
-
SHA512
1307f064ae24bf5ff757f2f249b875a872b45a3301f3c6775f065f0ec192540f2894d9da9809ac8c1daf7ccf1a3acc5db7b5fc3737ba7c54d52f49fa210bd00f
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+4PIC:5Zv5PDwbjNrmAE+cIC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XR.exe
Files
-
XR.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ