C:\Users\Chinezu\Desktop\x48\spooferasfasdf\obj\Release\X48.pdb
Static task
static1
Behavioral task
behavioral1
Sample
X48.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
X48.exe
Resource
win10v2004-20240802-en
General
-
Target
X48.exe
-
Size
416KB
-
MD5
0701b4cd7788620bc416b975d63940e4
-
SHA1
070f6d0a2502e9ec50df46b0cb92695e64077b48
-
SHA256
f76f82178690cba0b9195736a1ae1cc91511d2768b3e27ccf80ec783bf1b800e
-
SHA512
92bba08693a512d7d58d263985f6fed5d8d945d03b381022942f096ff72c0ea5268961f5abd82c5af67c63ad77caae5c199d4c5ebaf94e6386850023d824e786
-
SSDEEP
3072:q99iuko7kmnEGZghA4wHq9iuko7kmnEGZghA4wHM9YyzVbU:y9iEVnEThA/q9iEVnEThA/sp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource X48.exe
Files
-
X48.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 414KB - Virtual size: 413KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ