XpkT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2095af004e76f0cf7243b68e868eeb3b9c8c157d632aa785a87a93addf3b75fc.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2095af004e76f0cf7243b68e868eeb3b9c8c157d632aa785a87a93addf3b75fc.exe
Resource
win10v2004-20240802-en
General
-
Target
2095af004e76f0cf7243b68e868eeb3b9c8c157d632aa785a87a93addf3b75fc.exe
-
Size
745KB
-
MD5
89b1330440f5e3cc7fdf662981760845
-
SHA1
39484bf19c50d51022b3f90361bfd048b1ee1df6
-
SHA256
2095af004e76f0cf7243b68e868eeb3b9c8c157d632aa785a87a93addf3b75fc
-
SHA512
2db2b4de6eb9bda9b1d93d4e14417a31193cdcebd4736b07a49d0d72e34244d166285107eda6968c3b781e20e7302a2d93b2e5a3df93a6b3217e6a3d426bc1e3
-
SSDEEP
12288:a4Gc47cJDImS//BEQPo+wknW47+O7dwKOFxFp/xb0rA5CXpLJ+U3T:9GrSImS//BEknwGW47+OZFOFH0rA5yJ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2095af004e76f0cf7243b68e868eeb3b9c8c157d632aa785a87a93addf3b75fc.exe
Files
-
2095af004e76f0cf7243b68e868eeb3b9c8c157d632aa785a87a93addf3b75fc.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 742KB - Virtual size: 742KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ