Static task
static1
General
-
Target
XClient_protected.exe
-
Size
1.4MB
-
MD5
25bd93c457be60a50293b63c1ece7e49
-
SHA1
ee155d340d875ea0b8874e696c909a3165997d84
-
SHA256
fd3689caa48710952b9e70d4d21ebef95a22f9e1ae1483d22aeeb32256a2ea6d
-
SHA512
3fe4d4bf1836ccc7e1f868e2a4180c02f126d24a19d6d99b6b75fea64281811716ea4504ac2d0aefcf6310b12a9919c5c886916a42c86a277ef7aa5c32a2640b
-
SSDEEP
24576:v+v0i8VUlXhkUi+kF882s6rXUQ1tUjj0LsjBxUNs8Z0Y6oecXZadRXOc:60ulRe+kF8trXUQ1sH4GC0Xcpy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XClient_protected.exe
Files
-
XClient_protected.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 265KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 949KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE