XWGp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3082fec2cfa3b3dc369b59c54924671fe8abf1a29214a9852892c538587cc25f.exe
Resource
win10v2004-20240802-en
General
-
Target
3082fec2cfa3b3dc369b59c54924671fe8abf1a29214a9852892c538587cc25f.exe
-
Size
1.2MB
-
MD5
807f269d94f0b5df1d0f07f16d75a6d8
-
SHA1
ec07e55268f409559cd5a777829cd7379aa7595e
-
SHA256
3082fec2cfa3b3dc369b59c54924671fe8abf1a29214a9852892c538587cc25f
-
SHA512
de86b588c1bae0f8f8991e5c1b7c6e08a686553b42b2b4f10f336826fa718d6b29824a57a22fa003acc85e068c2286161f050cb353651449073e21c6ddb6887a
-
SSDEEP
12288:12iN5PxSNkJwd648vr6CGBV7L56dP3Lk6byWCBkrt:11DkNkWd6oCgVRsP3LPbcBkrt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3082fec2cfa3b3dc369b59c54924671fe8abf1a29214a9852892c538587cc25f.exe
Files
-
3082fec2cfa3b3dc369b59c54924671fe8abf1a29214a9852892c538587cc25f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 635KB - Virtual size: 634KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ