Xeno[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Xeno.exe
Size

660.1MB
MD5

c5397fcc1eabfb8273413ccd858ee7cc
SHA1

a125750c58699cb855f14065812bcd9661145fc0
SHA256

b71303a76f8d377e588551bd0f136c95539aa96ec7515f5f8bda470a6cdb0788
SHA512

d0b8fe396be6cbdf622bf43d9c4c244ad464671d4e83de213779332d4d21afb722e6d533c16c8bef41c612e10a2517390e2b42b374ce17e4930d65b344af2ae9
SSDEEP

393216:L5QqSjkyAZ7z89Tjhi/ULZ8Kjtx2f2o6xfa9oR9Qy:L5QqSNI389mULGK4k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xeno.exe

Files

Xeno.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\TonySoprano\Pictures\Launchers\launcher2files\obj\Release\Out\Installer_sharp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 659.9MB - Virtual size: 659.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ