XB36Hazards_Launcher_v4(1)[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XB36Hazards_Launcher_v4(1).zip
Size

4.0MB
MD5

cb17007629a37845e309c7e9359b6e47
SHA1

c8d6980280202cb9d2215f619edcb1a8c17a43d0
SHA256

a7a50bfbe8f0168241c4f83a564467c2a9a731b0bb0e5d16fb480ad1890f0599
SHA512

e76cdc5893e4612c3ec8b092b836d79739e0343f5a94a799af0707fa3d5aa2b7dc8cd2c02fa12d7e5e72a2597392b7ce2f5bb1d3a7d9998fcb19c542a60adb75
SSDEEP

98304:i0lZZhM1jKTBsy6KPEBCgdaInHZ7tycP86FE:i0lLhqjHcPEBtHZ5ycP86G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XB36Hazards Launcher.exe

Files

XB36Hazards_Launcher_v4(1).zip
.zip
SGTA411
XB36Hazards Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\XB36Hazard\Documents\Visual Studio 2015\Projects\XB36Hazard_Launcher\XB36Hazard_Launcher\obj\Release\XB36Hazards Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ