Xcipfrrs[.]exe | Triage

Sharing

General

Target

Xcipfrrs.exe
Size

340KB
MD5

be386c47c42d11ab2b0ee2e820297608
SHA1

3a2720f80b8394f0ce859d1dd5566b681252ea84
SHA256

32a00fc9b61a3ca12be1aa91388fbd5c37b19650b01a11d0e5521097b3de3e11
SHA512

b7e401045970b7349c8e113cb53c64171e54e34c526a2b3ef8344156f6bd5fc40479d6c1f4281e5a82dc7eeab143a257c6958cc13da25979acd4cd7e4be19486
SSDEEP

6144:QvpJo0XE/ZLUsQqVChyUWmSvoPsasomPFpyit2mHKW2cwOkxStaC8dNH1:ko/qqoU8zsu6stR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xcipfrrs.exe

Files

Xcipfrrs.exe
.exe windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ