Static task
static1
Behavioral task
behavioral1
Sample
xloader53_payload.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
xloader53_payload.exe
Resource
win10v2004-20230703-en
General
-
Target
xloader53_payload.bin
-
Size
208KB
-
MD5
ae7d275b8e6151c1f2819fb44cc601f5
-
SHA1
6b88194d685bda1586c2f709b4cdf2f7b2c49bef
-
SHA256
67f5e3d7cd31ca5d0ed8e2e6ea5e82b29cf7a386a3a8f77fe02b89b121b68b91
-
SHA512
18facdfece5b24c116039769a2b2761d39b78c8480d990a2b39187f8b3eb4391c80a4a3f2cfb26c9a28d284b2c463712f54e9def3245fc727932788895ef6f0b
-
SSDEEP
3072:APjmoYTYsrULLTVQd3jY0dpMK8BkFRoTC8+dvTSrui9koOItemeMGMIyCc2vGZy:Cm7CLTVQdzT3fXvSrB9LOIteFPWgGs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource xloader53_payload.bin
Files
-
xloader53_payload.bin.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ