Static task
static1
Behavioral task
behavioral1
Sample
xeno rat server.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
xeno rat server.exe
Resource
win10v2004-20231020-en
General
-
Target
xeno rat server.exe
-
Size
40KB
-
MD5
15646ccd22ca68b00cf6d62cbb94d6d4
-
SHA1
7e7e5e889205dc4f56aa61ffbcd6b89e1bcc87d2
-
SHA256
d16246942edca29de54f6e2818447e16092615600d1bebcd9c73ea39a705844d
-
SHA512
2d8dce3b140ea6dcbb01ca8b4caeea265108c65d8e657488b26ce058652f640d48f630683ad7034814970e6933909104bf26b583bee352ea2bc24de9a33e8e4c
-
SSDEEP
768:jQbHY3voobaXV2p8cXxaa7HpUpTBVrbokr8kt23RPs:CKvxaXV2p8KzOlbrboHkks
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource xeno rat server.exe
Files
-
xeno rat server.exe.exe windows:4 windows x86
Password:
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ