c2908fecd46ed515e5be300a9aa45272c390d8d0c2975ce563d6327ec1cbf613[.]exe

General

Target
c2908fecd46ed515e5be300a9aa45272c390d8d0c2975ce563d6327ec1cbf613.exe
Size 971KB
Sample240613-ccskrazgkf
SHA256 c2908fecd46ed515e5be300a9aa45272c390d8d0c2975ce563d6327ec1cbf613
MD5 d3a3b4c7f2f0edfaf56cefc8c05f73fb
SHA1 bf1db6f43dd595ff94972f0e98e74c0e5b103b00
SHA512 82901e9cc55798504492c3789bef02e5e7363ba74c256a65c5b200156969ec3e4b7588399d44f4bf5c8b4b126cc2ff4bd96ec044f03d536f495d86621af93a95
SSDEEP 12288:Z/xRnsHqxK3viiKuuTClI8cCJd5BskCuzkA92T31jnBOz86F:ZpZsHq030T8cU5BHiFz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2908fecd46ed515e5be300a9aa45272c390d8d0c2975ce563d6327ec1cbf613.exe

File Explorer

c2908fecd46ed515e5be300a9aa45272c390d8d0c2975ce563d6327ec1cbf613.exe

.exe 971KB

c2908fecd46ed515e5be300a9aa45272c390d8d0c2975ce563d6327ec1cbf613.exe

IMPHASH 06120a8dd16bbb5ed838070a082fe9ff
SHA256 c2908fecd46ed515e5be300a9aa45272c390d8d0c2975ce563d6327ec1cbf613
MD5 d3a3b4c7f2f0edfaf56cefc8c05f73fb
SHA1 bf1db6f43dd595ff94972f0e98e74c0e5b103b00
SHA512 82901e9cc55798504492c3789bef02e5e7363ba74c256a65c5b200156969ec3e4b7588399d44f4bf5c8b4b126cc2ff4bd96ec044f03d536f495d86621af93a95
SSDEEP 12288:Z/xRnsHqxK3viiKuuTClI8cCJd5BskCuzkA92T31jnBOz86F:ZpZsHq030T8cU5BHiFz
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11648

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\28572\Desktop\瑾VS修改版\XyLoder源码\Release\XyLoder.pdb

kernel32

Sleep VirtualAlloc VirtualFree FreeLibrary GetProcAddress LoadLibraryA CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapValidate GetSystemInfo GetCurrentThread OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTempPathW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetProcessHeap SetConsoleCtrlHandler HeapFree HeapReAlloc HeapSize HeapQueryInformation WriteConsoleW GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW DecodePointer CreateFileW

Sharing