C:\Users\Admin\Dropbox\XSEO2024\XSEO\XSEO\obj\Debug\XSEO.pdb
Behavioral task
behavioral1
Sample
XSEO.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
XSEO.exe
Resource
win10v2004-20241007-en
General
-
Target
XSEO.exe
-
Size
367KB
-
MD5
3be7c8a57df6357fd8258e50369d5148
-
SHA1
b61fadb8b5011b3e1275d2794d2b8d8dbaaa7d79
-
SHA256
bfa2c63edda768bf02cb62271b1b50bfd954d6786f7d14b43f0441c7a1fb0569
-
SHA512
0dcd7c978a597c9ff8152eb8defbba41e20c2765ccef21dd7efbf6c8d46935fd714949cd53d84aee1dafd7652a82187c6324578125243f15090e020b07ceb98a
-
SSDEEP
6144:7tLv6faMBQnoCHLigDzZTujLp2vP6n9/2dRLEb20bHaBhtGLY0vjnyasyG12JseH:5eLvjnyas912JseybouEui
Malware Config
Signatures
-
RevengeRat Executable 1 IoCs
resource yara_rule sample revengerat -
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XSEO.exe
Files
-
XSEO.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ