Static task
static1
Behavioral task
behavioral1
Sample
xachinaproject.exe
Resource
win10v2004-20240802-en
General
-
Target
xachinaproject.exe
-
Size
16.8MB
-
MD5
4ed0d9f5e7a056a6fb5cd054b1659efa
-
SHA1
2eadd2027fc94af5695f31ac6a618690b887f0d7
-
SHA256
3464cde267e068d8f9a770cb1f84f0f375768e412fb43e3c4ca5046257d1b339
-
SHA512
8f9aa853e43c2a4a8e0e7662e9872faea5450e921b119b2b17f3d3844bc19ecb9d39ead1d50df6702c3a59f6380dd808e2ed35978f72052e4858a71786abf609
-
SSDEEP
393216:7xWfq4uw8KYtFoYwcohv+wll7oEoAie/JHeH3z:7wfDuwsoYb8+wEjA//1eH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource xachinaproject.exe
Files
-
xachinaproject.exe.exe windows:6 windows x64 arch:x64
44fd576e260aefd44ab336839bed1f13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
__C_specific_handler
user32
MessageBoxA
kernel32
CreateThread
Sections
.text Size: - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.`Mg Size: - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.#*` Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Go\ Size: 16.8MB - Virtual size: 16.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ