Static task
static1
Behavioral task
behavioral1
Sample
XBASS.exe
Resource
win7-20240903-en
General
-
Target
cd9afdef9b69b501d2767b70792a481f1c768ba3585a53de167703fe250ab2b4
-
Size
380KB
-
MD5
04ac6e542ab1da8613a95d2ba96ea42c
-
SHA1
9ebeb2b6202298943f9af83c7d21770573b0051a
-
SHA256
cd9afdef9b69b501d2767b70792a481f1c768ba3585a53de167703fe250ab2b4
-
SHA512
26d7c28b31099f401280b05b261ef93aae34288bec0e3ec98dbc2de68a3d447e9be175073988bcfdd694c04fc680dab33febac1c21af2741830c8f9218e4774a
-
SSDEEP
6144:+QIdxXoTEXCwa9c8Ls28E9DUzymHe2gKGZ66Db13Zc7tNvo2fVHY5E1Cj+BzsJnY:+Q4xXoTEXCwOHkVzle2FYbFo02fVGEH7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/XBASS.exe
Files
-
cd9afdef9b69b501d2767b70792a481f1c768ba3585a53de167703fe250ab2b4.zip
-
XBASS.zip.zip
-
XBASS.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ