Behavioral task
behavioral1
Sample
d13bf4f55514937236292cd45ff05719c8a5d8431893ed12f18b3d0e13572eb2.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d13bf4f55514937236292cd45ff05719c8a5d8431893ed12f18b3d0e13572eb2.exe
Resource
win10v2004-20240802-en
General
-
Target
d13bf4f55514937236292cd45ff05719c8a5d8431893ed12f18b3d0e13572eb2
-
Size
72KB
-
MD5
32700ed085b83a0c7850f4361613f7fe
-
SHA1
98630d324d124705bfa4c527dfa12223f870c27b
-
SHA256
d13bf4f55514937236292cd45ff05719c8a5d8431893ed12f18b3d0e13572eb2
-
SHA512
6775430361e073aa44b37b9889b452609d415553bdb7cd521f9c660f5f90cc550c74577db97576b964ab037919ef088bbc084eef3ae1933109e4a08e71262e9e
-
SSDEEP
768:WSisJmceOowDlY8spLfFpyT7QHbtm+NEyqnN+8Nb:AsJmfODDe7prj4QHbt5EH4Ub
Malware Config
Signatures
-
Xenorat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d13bf4f55514937236292cd45ff05719c8a5d8431893ed12f18b3d0e13572eb2
Files
-
d13bf4f55514937236292cd45ff05719c8a5d8431893ed12f18b3d0e13572eb2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ