Xbox[.]exe | Triage

Sharing

General

Target

Xbox.exe
Size

320KB
MD5

39c325147eefd81ff4a953df9584095b
SHA1

04677ae1dbce1f873d06a749a664cead2007b706
SHA256

b2b6f755e9f8d67db3cb935366bce9332128724cc1289bf22a965b109a1bd1d9
SHA512

02dc42aad55ac0f4d59caeaae2faab620bf9842f92c0b1fc61a68b38e5239a027c5b81cf20895f0bfaa79da1fa49850fb05e51d5c6e0409752024a7b6b7a289f
SSDEEP

6144:Io+H+GqLsquZEKWU7eTxeqAhOCvP2wfrkTi:IoDGKsqRKBCTXqjkTi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xbox.exe

Files

Xbox.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ