Behavioral task
behavioral1
Sample
XDD.exe
Resource
win10v2004-20240426-en
General
-
Target
XDD.exe
-
Size
86.0MB
-
MD5
9eca0f4bda0d212c2b42e5b5c375a63b
-
SHA1
499431378209cb28aafb60017ebc230b468319cd
-
SHA256
6208a570ed2a5eb510ff1c7c34eff7a5316ec03ae3c1141811f0a967c8809e3f
-
SHA512
7d80196ae0e2fc4be6bc924b7b015907f5fa40d21cb0a2e34a2dbcb78febac8a551344b462c270c97bf4c46c205645147e3118e2f5af9224480789f3ccdc215f
-
SSDEEP
1572864:XUbrPU1e4iamkhLDyPl4QiZPBnqf3Gd6xdnj+Y/5szJKdmE7OZNzjWM9XNJbrkJN:XUbr4e4iadhLDy943vnyo6V/UKd27zjQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XDD.exe
Files
-
XDD.exe.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
.pyc