XenarWare[.]exe | Triage™

General

Target
XenarWare.exe
Size 59KB
Sample240604-p1sa4sgd2w
SHA256 af67708e9be6571551147ff1840a555cadd1ea0150a91001e00904a8cc7881b6
MD5 88f95b4a2d5af8ee7893a11abecb6ace
SHA1 5c349881da20c6ad25d7eabeaa41d1ae2d2ad8f2
SHA512 996fb4ec5a81648a2e5b706d95185b0ae73c65744a146e70bf06db076882474fc677a9095430ecbda108cbc6357ae3de4a1407eafd3a7a9e915f11476eaa0c20
SSDEEP 1536:ZrPJVKjbcknWSOYvTfkWkFM79yQVo5hWyZM+c:ZLJMjbcHDdMwQKDW7
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XenarWare.exe

SHA256 af67708e9be6571551147ff1840a555cadd1ea0150a91001e00904a8cc7881b6
MD5 88f95b4a2d5af8ee7893a11abecb6ace
SHA1 5c349881da20c6ad25d7eabeaa41d1ae2d2ad8f2
SHA512 996fb4ec5a81648a2e5b706d95185b0ae73c65744a146e70bf06db076882474fc677a9095430ecbda108cbc6357ae3de4a1407eafd3a7a9e915f11476eaa0c20
SSDEEP 1536:ZrPJVKjbcknWSOYvTfkWkFM79yQVo5hWyZM+c:ZLJMjbcHDdMwQKDW7
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

152688

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths