Static task
static1
Behavioral task
behavioral1
Sample
XeyWare Tool.exe
Resource
win10v2004-20240802-en
General
-
Target
XeyWare Tool.exe
-
Size
16.2MB
-
MD5
cd219ff37d6c0cdc323282fcf558f850
-
SHA1
645ce56a4116b8cdbf8ee36bdb51c9a4fae4fce5
-
SHA256
82ebfd8f10de46fe5857807384183774454b110eafb601cb8ba0aae0fc06a78c
-
SHA512
2bd4abd3a049ba9daa315cbf3161301ea3f04ecb4f23edb077b345a6adc98100016bf1ea5b338193cdf7dc7c48ea36ddb5866caa5dbe9cf15b03b07558f1f973
-
SSDEEP
393216:xPTWaAel4DHu3Xj/jPk+2tnMNmxLlaTH9tJcDOCPTlPJ8apUdTfmOJrNmqSR7A8Q:x7W+4DuT/jk+2tntLStoJhPJHUdzZQqz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XeyWare Tool.exe
Files
-
XeyWare Tool.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16.0MB - Virtual size: 16.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ