General

  • Target

    2876-0-0x0000000000EF0000-0x0000000000F38000-memory.dmp

  • Size

    288KB

  • MD5

    5b9f805d935ae8302436b6caa17a39d0

  • SHA1

    ceda556462957b2648089792c7f00bb14e8f4e8a

  • SHA256

    bba81d2a46e6575ee05879e4b6bf7f992aaf87482b38e7bc0d482a274161123e

  • SHA512

    5f780da7f0b802dd9a266e4ddfe9938970a222344f49c4fb5431333b076e680644a3981b38676f52d028ab402cb7c08b6f1426282751274086b53d0315133e87

  • SSDEEP

    6144:ycpvK9FXPLOxp6DE/rjph2lXFPG4+EKP+xSnO0:u9FXPLOToQulYO0

Score
10/10

Malware Config

Signatures

  • Detect Xehook Payload 1 IoCs
  • Xehook family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2876-0-0x0000000000EF0000-0x0000000000F38000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections