C:\BuildServer\Root\XSplit\SourceCode-1.4_M53_Release\{sa}\Release\XSplitUtils.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e49192213db29d0582fc69b4540aa5c9cb75344c52699c6fd717cf33ee99537c.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e49192213db29d0582fc69b4540aa5c9cb75344c52699c6fd717cf33ee99537c.exe
Resource
win10v2004-20240802-en
General
-
Target
e49192213db29d0582fc69b4540aa5c9cb75344c52699c6fd717cf33ee99537c
-
Size
194KB
-
MD5
9d043b50735bb7c5340e7d1570634a43
-
SHA1
2e8166444b16799297a7c238833b61b8437adfdc
-
SHA256
e49192213db29d0582fc69b4540aa5c9cb75344c52699c6fd717cf33ee99537c
-
SHA512
c54697e94a135ba328ce0cd9df2d6215a163b4e462bb89ad5234d27e135488798e12bd7b984495f296553e134fc5477de8505854f370f6b77ec42298efb9d513
-
SSDEEP
1536:nsff+sxr1DG8e0s9KJxw4prkIWfRfMPAYOHgD/P5xXA3dBxqoJpUoexHV:nq+ce0y4aIwMPAeVpA3DxqoJpUtxHV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e49192213db29d0582fc69b4540aa5c9cb75344c52699c6fd717cf33ee99537c
Files
-
e49192213db29d0582fc69b4540aa5c9cb75344c52699c6fd717cf33ee99537c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ