C:\Users\o0dem\Desktop\Tools_Source_code\talisman\Xenoverse-Z-Soul-Tool-master\ZSoulTool\obj\Release\XV2SSEdit.pdb
Behavioral task
behavioral1
Sample
XV2SSEdit.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
XV2SSEdit.exe
Resource
win10v2004-20240802-en
General
-
Target
581d49be492287faee8d97ef0ae861850a7f2ebefd58f83dda39c0bcdcf59b1f
-
Size
179KB
-
MD5
9d5f8d913cb12c78a9b33f7a9a143e90
-
SHA1
64e7b49b6fd95ed378505e85678eb8fe517d6e5b
-
SHA256
581d49be492287faee8d97ef0ae861850a7f2ebefd58f83dda39c0bcdcf59b1f
-
SHA512
22afa54f65baa8b7c1fe0308ebfec2ae6978737a108d8ac55e6a7bb43ac4ffa948f18cde74ab6ce53495aa3d3feeb4f538e8eff89d53cb15f7022cddd4d922bd
-
SSDEEP
3072:EtW7b0t/+gKhfY4zopADpTsGS+q8y320eVaTsnZoZu8cbXV1/T9RN/8U2te0RDNP:EtWfqWgKhfBCA2GI8o2nZog8c7V1/TTG
Malware Config
Signatures
-
RevengeRat Executable 1 IoCs
Processes:
resource yara_rule static1/unpack001/XV2SSEdit.exe revengerat -
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/XV2SSEdit.exe
Files
-
581d49be492287faee8d97ef0ae861850a7f2ebefd58f83dda39c0bcdcf59b1f.zip
-
XV2SSEdit.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ