C:\Users\cryfx\source\repos\XPSLauncher\XPSLauncher\obj\Release\XPS.pdb
Static task
static1
Behavioral task
behavioral1
Sample
XPS.exe
Resource
win11-20240221-en
General
-
Target
XPS.exe
-
Size
129KB
-
MD5
31a28f3994a51d339076c3e78e851d48
-
SHA1
766ad41f625afbb806a1647994ddcbf981a41255
-
SHA256
6b70a07a17bd023a74a2d32bb465e17e7f670fe00692e5a6fc79d34feae75ba8
-
SHA512
df778ed89fe4029e929b28fd3eaf8ff55b5c476bf36edc89b5cb5740172727eecad9d7ab5fb0dd34288b70b782e2dd7ad473113198351d166fb46769a54e028e
-
SSDEEP
3072:zHe7JgYnzm+bP0+xgudidKzYGSoodidKzYGSooek:IZC+D0Wgudiqsoodiqsooe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XPS.exe
Files
-
XPS.exe.exe windows:4 windows x86 arch:x86
Password: ee
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ