Release[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Release.zip
Size

834KB
MD5

75ed50291508dd98b911d8c1d5c006d2
SHA1

50115e5ad2d4bb224d43414f1dfec0820bd3b6ea
SHA256

fbf511111e0ab1a39e1077e0bd4ffdcef105bcc0381dfaa429337939f9e53cc6
SHA512

67b2fdcebcda0becd3ea52cbe718c2d1a6edc703231aff587174b31ff94ca6aed4b8d9bcdce1f00f4e513427488aa614e745c22c07b7016f0bcf8d66572eb9b0
SSDEEP

24576:lm9fIlfK/kUOXxjD7TTyYbW4tDV6/S/o52GTo55+W:8mmkUOXx/LyY64tD+SgYLf+W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Release/Xivion.exe

Files

Release.zip
.zip
Release/Xivion.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Orbx-PC\source\repos\Xivion\Xivion\obj\Release\Xivion.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 848KB - Virtual size: 847KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ