Behavioral task
behavioral1
Sample
XboxInstaller.exe
Resource
win10-20240214-en
General
-
Target
XboxInstaller.exe
-
Size
23.7MB
-
MD5
4762cb9a615c458438dda5e40c0f368c
-
SHA1
70593d719d2e8681f366d0ed63f8252532683840
-
SHA256
43a4d4dcdba06fed434f570fd230c35c1edde2df52ec23ad6a5312e23cca70fa
-
SHA512
4bdab86b4ad91943d7fda0294fd704418c1efd9b636feb65625edf66815458260e6955f1b77f5464974a9bc1d29fa8a0a1d8f669e517b29aafe53c26c04e8b5a
-
SSDEEP
393216:/vGqu5a5cKYEq2d4e0eqS/GyxS4UUUPZfB+OdNJgvfvZMixjVuBOO9sGAqdoUalj:/vGqGtpiGeJ/y4UU6Z4Od3gnhMix4YOE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XboxInstaller.exe
Files
-
XboxInstaller.exe.exe windows:6 windows x64 arch:x64
d27a4683d473648900989104c803ec50
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d10
D3D10CreateDeviceAndSwapChain
d3dcompiler_47
D3DCompile
kernel32
GlobalFree
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SetClipboardData
advapi32
GetCurrentHwProfileA
oleaut32
SysAllocString
imm32
ImmSetCandidateWindow
ws2_32
freeaddrinfo
Sections
.text Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 839KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: - Virtual size: 16.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX2 Size: 19.2MB - Virtual size: 19.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ