xaLicenseGenerator[.]exe | Triage

Resubmissions

08/06/2024, 18:49

240608-xgh74aef4z 3

08/06/2024, 18:48

240608-xf2caaef4t 3

Sharing

General

Target

xaLicenseGenerator.exe
Size

450KB
MD5

cd2232f1411d3a55f9158e21b63dbeac
SHA1

0e285052043c2a998ae40f2176c80bdc98d94adb
SHA256

dc8bcf028b4205b6fd3ac10704b6b931fe94cab8c7c429347b7a97f66be75679
SHA512

fa84c114d1fb78efa2544b4f99e9d189af8be3c396195de448bbec16566a7d2576b74a4cb8d18579b071b906d9d2d4cf0ddb95b8e9eb45f385a86731ac4508e2
SSDEEP

6144:NMdgP9yxdzl1KD8fc7uMwvFPc6m+o36gj+L:NMdA9mzWwfcSM4xk5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xaLicenseGenerator.exe

Files

xaLicenseGenerator.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ