XARKrAz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
923fc964a80c47d57aeafc0ddbff753ac3ba854655b0231b358e54f54512503b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
923fc964a80c47d57aeafc0ddbff753ac3ba854655b0231b358e54f54512503b.exe
Resource
win10v2004-20231215-en
General
-
Target
923fc964a80c47d57aeafc0ddbff753ac3ba854655b0231b358e54f54512503b.exe
-
Size
681KB
-
MD5
65eb5063ffd21ea06563acdde5b0aec5
-
SHA1
9109276193763e3a58b4d8fe472c5d4730b37b33
-
SHA256
923fc964a80c47d57aeafc0ddbff753ac3ba854655b0231b358e54f54512503b
-
SHA512
a53c5750a427297426cc23416e9dc282814a1210cfc30ec7bf818770315d819cfd32b432d1b411f05a5394afa8df323ec028e136a38ae70a44edf28d53d64cb1
-
SSDEEP
12288:nJEzqHKMbNeCpN/PmNcfF+RZnGItAdjfRnisFIH9XonxvK4+n0cV:nSz87bv/u/lO169evKb0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 923fc964a80c47d57aeafc0ddbff753ac3ba854655b0231b358e54f54512503b.exe
Files
-
923fc964a80c47d57aeafc0ddbff753ac3ba854655b0231b358e54f54512503b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 670KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ