Overview

overview

10

Static

static

10

XPonTweak.exe

windows7-x64

10

XPonTweak.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XPonTweak.exe

  • Size

    3.0MB

  • MD5

    317e9fa68b8284b0a745cd245d711b1c

  • SHA1

    e34c2d9a98a32fc6f8d184433c8ad04d79dc79d0

  • SHA256

    5943d92613167ee35c155d5de805e2759fd317f4d0a35e81a1729efd5d6ad551

  • SHA512

    03a9d72a272d02ce40e7eef3a175d2233bfce292c2b52a1bf137f3264bfea7d11e4e87492b043556aceb155954cf31981b6678f7227272fdffed693fe3d5a20f

  • SSDEEP

    49152:mg2SyKATyJWbGrq0kQyXnwyEmtDbKY/mUYbVcWboMZJbpOZU4R/lS4p:mzSlYyJIGrvYXgYb/mUYbVNPxp0hzfp

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XPonTweak.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections