XAuth_2[.]0[.]7_eng[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

XAuth_2.0.7_eng.zip
Size

7.5MB
MD5

2c7de58342222dfd55349a606540cdde
SHA1

4a3f8138f54267eb516c220b2a36be3b1796692b
SHA256

8b791ba1ac46c460671bd0f4a1f3b2373c24d12ad01839dd5de48c9cd123794e
SHA512

d70ba349b245aef19536e208c7bbe6a8a0edd4bf85750b3f0c769ef9e108f64513e5f599df4f6dcf482b812c82d6064d283c2ac38d9f151bea4dbd2e17f748f4
SSDEEP

196608:F7ZkppWmhAKeCLj8sk7KEgA0DutQ3QE6Que44:F7ZMpWQdkN0DuigE62b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XAuth.exe

Files

XAuth_2.0.7_eng.zip
.zip
Langpack/lang_e.ini
Langpack/lang_r.ini
XAuth.exe
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 384KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ckrrfx9j
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2z.4ilfo
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.81mk8wn
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8u9jfx6j
Size: - Virtual size: 7.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mpcyobhe
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8o7tf8rh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f433e7fcc51e68080022754836705744

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: - Virtual size: 1.9MB

.itext Size: - Virtual size: 12KB

.data Size: - Virtual size: 24KB

.bss Size: - Virtual size: 384KB

ckrrfx9j Size: - Virtual size: 16KB

2z.4ilfo Size: - Virtual size: 4KB

.tls Size: - Virtual size: 4KB

.rdata Size: - Virtual size: 4KB

.81mk8wn Size: - Virtual size: 92KB

.rsrc Size: 80KB - Virtual size: 396KB

8u9jfx6j Size: - Virtual size: 7.3MB

mpcyobhe Size: 7.5MB - Virtual size: 7.5MB

8o7tf8rh Size: 512B - Virtual size: 4KB

.text
Size: - Virtual size: 1.9MB

.itext
Size: - Virtual size: 12KB

.data
Size: - Virtual size: 24KB

.bss
Size: - Virtual size: 384KB

ckrrfx9j
Size: - Virtual size: 16KB

2z.4ilfo
Size: - Virtual size: 4KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: - Virtual size: 4KB

.81mk8wn
Size: - Virtual size: 92KB

.rsrc
Size: 80KB - Virtual size: 396KB

8u9jfx6j
Size: - Virtual size: 7.3MB

mpcyobhe
Size: 7.5MB - Virtual size: 7.5MB

8o7tf8rh
Size: 512B - Virtual size: 4KB