Xlag 2[.]0[.]exe | Triage

Sharing

General

Target

Xlag 2.0.exe
Size

193KB
MD5

42004df4802f5602553257953043ae13
SHA1

09fb41b1df980d56b7919ff08b8106b0c8ef55a5
SHA256

bb16f22727b29329ae4ad968d32b49f0d3bcac4f956d6d44b2cc10bf0fcabac6
SHA512

a1f1f022ca4153fe30575b26e01fb8ad086431fc83e75851e972c4028330c15e776f8131cc9ad05fd9cc8922aad0bca4cdadce9bf6b005c44618d67762bd4390
SSDEEP

768:X4Mkc8RrK8aetj+Y9WFectmZ0dVMgSNY/vRJa+3pgN6WIke:IMOR25eV1+e+PMgEgJj3pFk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xlag 2.0.exe

Files

Xlag 2.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\smith\Desktop\sk\XLAG 2.0\XLag 2.0\XLag 2.0\obj\Release\XLag 2.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ