Static task
static1
Behavioral task
behavioral1
Sample
xp.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
xp.exe
Resource
win10v2004-20240709-en
General
-
Target
xp.exe
-
Size
1.3MB
-
MD5
f75593168d7df64fa74d6bbb2204658c
-
SHA1
185c893d3b3f18c3a82f4d249fe95ee7bf01a517
-
SHA256
2bbeb19a2061cd05f46cc282ef78b12f02d2d3ef35533c4419f29cf83e37ecd4
-
SHA512
0d1f780e419f57f8a689e96ac6aae11370e00d801dce1acfa33503bc969af595e0b3c6ff7e1a0b9ae3aed849acd4fc7c33a39d9c7358a66226fec2ad2a267440
-
SSDEEP
24576:puO7Bk4ybjkbKI85TS+NxCJ+1r9wyxzLy3p7dVWzh:pGB0j89FxCJ+1Rwc63LVW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource xp.exe
Files
-
xp.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 121KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.51ibwrg Size: 974KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE