Behavioral task
behavioral1
Sample
3914de8aa3ecf3b70f7771655b620180N.exe
Resource
win7-20240705-en
General
-
Target
3914de8aa3ecf3b70f7771655b620180N.exe
-
Size
44KB
-
MD5
3914de8aa3ecf3b70f7771655b620180
-
SHA1
948c7684983bac80a39b9557dd48d89fb9b6e843
-
SHA256
27c30e6621e5fec718995b0360bd72284c0498da65e4229dbfbf3316d4548c14
-
SHA512
e594c206124c211838d3fc68043765e8506b1141369ca4d2a1991ddc2c25adf8b8facd6a4b3de2c3aeb133f754aa4762b0a5669fc5c4fe0b087aaff211c5e24e
-
SSDEEP
768:kKpu9Tv4A4QfJkwINr8I0SeM5MbRFywB/ZXD5DtZ9bEUWAfAFkY:hc9z4rQfwNr8QeM2biwBx5Dz9bEpAfol
Malware Config
Signatures
-
Xenorat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3914de8aa3ecf3b70f7771655b620180N.exe
Files
-
3914de8aa3ecf3b70f7771655b620180N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ