XOutput[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XOutput.zip
Size

742KB
MD5

b76ef0d9ad42edc4e2f5a427e5689fc1
SHA1

738804a74c35bdb7f2ea56f7ac1725e45bf10f43
SHA256

03f4e77fb9dbbae8a42d083309a79588d761e12f715464b91a2f186d834fa1a2
SHA512

3efbf1c8776b5a4d923103105bb0465c87bf6b45d0046424f7e4669dc99830aeeb7e22e24ec29a12acaef578fe62d6aa13f699208160d59864ecea099430e379
SSDEEP

12288:Yhqc5GPIFCYpNbN1SB3Q0Cf+HgbSNZYaDUZsvwsreESNipzxIFqq7yBx9iWH1:1QGPGhNg3XA2NPvwWqoxIFqJkK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XOutput.exe

Files

XOutput.zip
.zip
XOutput.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\XOutput\XOutput\XOutput\obj\Release\net452\XOutput.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ