Static task
static1
Behavioral task
behavioral1
Sample
XLT0090008000000.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
XLT0090008000000.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.82a22d3136d103bab8b89e808feaa0465ba5ac0515e2484d16845aa6bac2c82czip_JC.zip
-
Size
419KB
-
MD5
e36636bbab6a76f6c55800775115f47e
-
SHA1
d513b5b10d2294d26d924bc5d3f8aa0b2716d4a3
-
SHA256
82a22d3136d103bab8b89e808feaa0465ba5ac0515e2484d16845aa6bac2c82c
-
SHA512
ca48a81ff82c6a298081a5d8159636e9dfb9c684bd9de7f7e1b6000152b19aee8341caf9ceab3c3c5daff356ed5f129d07e9707c8e8e8674ce9f00d7b49674ac
-
SSDEEP
12288:zySQ+4KbYSXuFdE9JHwv9T5RO/joRkGFrKFOgU:zvR5RWF5M/khgU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/XLT0090008000000.bat
Files
-
NEAS.82a22d3136d103bab8b89e808feaa0465ba5ac0515e2484d16845aa6bac2c82czip_JC.zip.zip
-
XLT0090008000000.bat.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 515KB - Virtual size: 515KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ