VAZAAD XITERS[.]exe | Triage

Resubmissions

08/09/2024, 10:04

240908-l4e86szdnl 7

08/09/2024, 10:03

240908-l3j6qsscjh 3

Sharing

Copy URL Twitter E-mail

General

Target

VAZAAD XITERS.exe
Size

180KB
MD5

42156c47553206706ea3c9552fd846a6
SHA1

a492ce349e6a6d58af0753cde194537a93956735
SHA256

44e2c3d7cb17d501c0a73807e300e1d58431120878a393797493eb3467494ddd
SHA512

bc917d2d3c15c7381edf978d4666e2666adab49f93e858759e2739ed1b29af05446730cde9c8f2a0c77539e6b49792bcfe83b536c2b62e28a1cd3755347f5874
SSDEEP

1536:1woFgwrmGX0twRlOHhGu3RYpeM6JrRrV4d2LEwEkE7x9/dkDwqDwFDwFDwZbhTcn:ymgwKGEtwRlOBGEe6zk9Xcv2vuRV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VAZAAD XITERS.exe

Files

VAZAAD XITERS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\A\Desktop\VAZAAD CMD SECURE\Downloader\obj\Debug\VAZAAD XITERS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ