Xenith External [.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Xenith External .exe
Size

249.2MB
MD5

3c4365066e289f6dd6e196c9a7342cfc
SHA1

a43f6425ab6c3c2241ae39c4a794e3594c4133fc
SHA256

fc089259bfe7715dae78122890c9acc1c2024fbb3ee631ad7d8f0fa950c56073
SHA512

1a1fcfd0431f0daeeba904e492e8c2c3d3969f8f0adc6b6fb1ec822083e22b8a0ce9754b558b7502f4c2504975f3e5155161ae91e8180e936b3a83f1fa2802da
SSDEEP

3145728:lXtFn0i+Vgs1ljKB4h0QWlfYtXdXzsz2KuCjh5ap475FHj7fkADUD8Xt:l9qjl0QuSXFzszuShcp475FD7fkxG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xenith External .exe

Files

Xenith External .exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 249.2MB - Virtual size: 249.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ