X-Ware[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

X-Ware.exe
Size

165KB
MD5

f0edf1462ac1c9391b498bc0bf2eb6b9
SHA1

23b21bc902e71d49fb988bdd2061b4c682175339
SHA256

666dccb1a91b33703798d465ec654b4ea9d67450bc25d6c0ca186dc73e98455b
SHA512

4c101e1860b82f2cc6d536e95524eaab00dd11f3ac2704a4f5b8393a4222e6be98ae88e8a68a1bc68c5c5da31cab5b935fdb18a592ac10a958cace25ca460c64
SSDEEP

3072:iBsU0hHEoC+n3v1WXv1W2n2sn2yOf/uDdZBj96ECx6FTW:BHEo1nf1217j8HuDdbjwEi6t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
X-Ware.exe

Files

X-Ware.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Flami\Desktop\X-Ware\X-Ware\obj\Debug\X-Ware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ