Behavioral task
behavioral1
Sample
383075faf72f71b208a817036ddaa06046616ebb2e3c21affb6d1675552feef4.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
383075faf72f71b208a817036ddaa06046616ebb2e3c21affb6d1675552feef4.exe
Resource
win10v2004-20240508-en
General
-
Target
383075faf72f71b208a817036ddaa06046616ebb2e3c21affb6d1675552feef4
-
Size
72KB
-
MD5
f10877836ae81ca05484735001209e9e
-
SHA1
f5b4beb51b81049c3607d0616f560028f02fad2c
-
SHA256
383075faf72f71b208a817036ddaa06046616ebb2e3c21affb6d1675552feef4
-
SHA512
c8da456e8bf16a64a8877b87f21e81cce8175487e841315f82dc23c74e8df7ce554925a927e2fc8d349f09f242525608844cedf521e58672c7c9648ca337c1fc
-
SSDEEP
768:YSisJmceOoRDlY8spLfFpyT7QHbtm+mEyqnN+8N9:CsJmfO2De7prj4QHbtiEH4U9
Malware Config
Signatures
-
Xenorat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 383075faf72f71b208a817036ddaa06046616ebb2e3c21affb6d1675552feef4
Files
-
383075faf72f71b208a817036ddaa06046616ebb2e3c21affb6d1675552feef4.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ