J:\dev2015\XSLI\XFI9300-Configuracion_Consolidacion\obj\Debug\XFI9300.pdb
Static task
static1
Behavioral task
behavioral1
Sample
20ea009a6e8adffe78739a07cb64933ce56e81097699e31b0769226d5b1070bb.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
20ea009a6e8adffe78739a07cb64933ce56e81097699e31b0769226d5b1070bb.exe
Resource
win10v2004-20240704-en
General
-
Target
20ea009a6e8adffe78739a07cb64933ce56e81097699e31b0769226d5b1070bb.exe
-
Size
177KB
-
MD5
3a4fcac361f41ce839b1df1d86dfb7a0
-
SHA1
f86d640a12e44d489f2c226f936b9c7c0dfffd3e
-
SHA256
20ea009a6e8adffe78739a07cb64933ce56e81097699e31b0769226d5b1070bb
-
SHA512
5f35fa49b4b70de7f8d4359f9b4eaf1d2fad446f56265a4991eede69ae4ac5d696e4887c371961fe67d91c111362e59b3b96d7424e34cee120f885fa8e508376
-
SSDEEP
3072:KNu0013cNzd63sCeVgTOHQi86tkVtsqDD3e:sdstHlVtsCr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20ea009a6e8adffe78739a07cb64933ce56e81097699e31b0769226d5b1070bb.exe
Files
-
20ea009a6e8adffe78739a07cb64933ce56e81097699e31b0769226d5b1070bb.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ