xachinaproject_sng[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

xachinaproject_sng.zip
Size

15.4MB
MD5

dbf19af836b943150c59e24cb3586847
SHA1

155110eef105fba3e945c1dec0c1af2db39c38b1
SHA256

c2b2b57220e876e17561fa1e6a5c1f4ec79af1657abd7ca4e82b8e85912b4bd7
SHA512

cf359ef21a0bc4173b851f5a6b71f4249734decf623e29bcb9bc31f1d1075ed3e544107d6daa654df5fb16740b50fc67b3ba9878801504ccf9cf84169f0c0563
SSDEEP

393216:xTKNqq2IYKI7doG+9KbGBhwYrH7SIL140Zft7:xONL2I6oGk6WwYay4s

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/stage1.exe
unpack001/stage2.exe

Files

xachinaproject_sng.zip
.zip
readme.txt
stage1.exe
.exe windows:6 windows x64 arch:x64

44fd576e260aefd44ab336839bed1f13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

__C_specific_handler

user32

MessageBoxA

kernel32

CreateThread

Sections

.text
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.`Mg
Size: - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.#*`
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Go\
Size: 16.8MB - Virtual size: 16.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
stage2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\swordily\source\repos\Kuplinov\Kuplinov\obj\Debug\Kuplinov.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44fd576e260aefd44ab336839bed1f13

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: - Virtual size: 37KB

.rdata Size: - Virtual size: 21KB

.data Size: - Virtual size: 5.2MB

.pdata Size: - Virtual size: 420B

.00cfg Size: - Virtual size: 16B

.tls Size: - Virtual size: 16B

.`Mg Size: - Virtual size: 7.5MB

.#*` Size: 512B - Virtual size: 104B

.Go\ Size: 16.8MB - Virtual size: 16.8MB

.reloc Size: 512B - Virtual size: 276B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 12KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: - Virtual size: 37KB

.rdata
Size: - Virtual size: 21KB

.data
Size: - Virtual size: 5.2MB

.pdata
Size: - Virtual size: 420B

.00cfg
Size: - Virtual size: 16B

.tls
Size: - Virtual size: 16B

.`Mg
Size: - Virtual size: 7.5MB

.#*`
Size: 512B - Virtual size: 104B

.Go\
Size: 16.8MB - Virtual size: 16.8MB

.reloc
Size: 512B - Virtual size: 276B

.text
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B