XTC_Remastered_1[.]zip | Triage

Sharing

General

Target

XTC_Remastered_1.zip
Size

300KB
MD5

f9096937143b1143cf019edd0444eaad
SHA1

5a918b615e25ef4b0d387ea875157fe767089bd4
SHA256

54bb1e48de73a9cce9af1f40786f9c2b81374b5dae36680040f60012a91bb6c5
SHA512

c7593ee7d7b5cad37e5a90793fe01dee97c5ea415a32296f365f1f254fb5eae0ec07042c14f4f9b54186f3575d23c87acb8c4ab8f1fab9d873f979ed09e8cae1
SSDEEP

6144:iMFEV7kntUN7chJhow9Li3atrzOOpSVH3Xvqs7+ghByVM+QA:9F47kntmchJhobaVzOOpS5Ssy0YVMDA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XTC Remastered/XTC Remastered.exe

Files

XTC_Remastered_1.zip
.zip
XTC Remastered/READ ME.txt
XTC Remastered/XTC Remastered.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ryan\Documents\Visual Studio 2017\Projects\IWCodZM\IWCodZM\obj\Release\IWCodZM.pdb

Sections

.text
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ