xkCo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8c9f635191f6e409980a08b99a0f6de40eff31789bca0b24002cacb43e1a33cd.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8c9f635191f6e409980a08b99a0f6de40eff31789bca0b24002cacb43e1a33cd.exe
Resource
win10v2004-20240802-en
General
-
Target
c20b48af1701aee3c320d517ddb95b51.bin
-
Size
678KB
-
MD5
fc6fdfa52f7b6ab238c5a71b53e86603
-
SHA1
8fbe5de375877048f15551d122069089f9b20bc4
-
SHA256
6503ef65c925e5c1c663b6a67de3ad9a18d62b6014ceb4b1fe4a84d9bb530299
-
SHA512
ae9408bb0568800b7e93a961a950dec0898c31d836555ad6b0f9abe135665d924558859aeaaef78c207f245309ea815753e515a43600c195fc9c8ef984afa919
-
SSDEEP
12288:I99Z6WL1cCxN1i8C5Alwn/5QBF5BCOBiEHhm6lXJl4ak8zYPELfULqoVV3EyS6ym:I92GcCBiP5Alf0OL4BYKEqq96yxM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8c9f635191f6e409980a08b99a0f6de40eff31789bca0b24002cacb43e1a33cd.exe
Files
-
c20b48af1701aee3c320d517ddb95b51.bin.zip
Password: infected
-
8c9f635191f6e409980a08b99a0f6de40eff31789bca0b24002cacb43e1a33cd.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 689KB - Virtual size: 689KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ