C:\Users\tryxz\Desktop\x48 lkoader\x48\spooferasfasdf\obj\Release\X48.pdb
Static task
static1
General
-
Target
X48.exe
-
Size
865KB
-
MD5
fa79f3bb558c3d30f45d7f93a3dfba74
-
SHA1
fd06c9c496d6c5ae8a22cd5ab97071a405fd9e92
-
SHA256
63b80f1b0a2ac7a853f1fde40d1d0cc81dc237acee0f716f992df40175d33308
-
SHA512
0eb0484447dcee0dbf0e0069773d48c1c2ca5d360595761adb8a92280fd81eda3dfd7ff395ae5c001f1efe97a8f8fc4103552d548c8158ef05e7db22d533ceea
-
SSDEEP
12288:j9zZ/AZ/9or6m+95NY/4vHf6kgmDxQBDtj90yhn:jI2L+95NpvHfIXDtj90M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource X48.exe
Files
-
X48.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 862KB - Virtual size: 862KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ