C:\Users\shadi\source\repos\Executor\WindowsFormsApp1\obj\Debug\WindowsFormsApp1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ZeroX.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ZeroX.exe
Resource
win10v2004-20240802-en
General
-
Target
ZeroX.exe
-
Size
182KB
-
MD5
42d33706cb448eed923798767744b67e
-
SHA1
15a1c3234508beeb329173d208b5ae8ed25695d2
-
SHA256
8473f0e542a02fda6cc9e9a8e52daedccd4b3e5f7cdef5f3032f3ff5e10a7c20
-
SHA512
9b6aefc90e2b6c0b0b374ea2bdc3b7d3fe7ab220789cb0ad493924ff1f1b76de0e090f0f8764a98b0cef95b603044b2780b18a0cc5c88bd7bc5193ab4f048de2
-
SSDEEP
768:KkMXA9k1pnWiUH911BeE1SiKTEFBp2D2L9f:KkMAqPnWiUdloiFps2L9f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ZeroX.exe
Files
-
ZeroX.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ