General

  • Target

    Xeno-v1.1.35-x64.rar

  • Size

    3.7MB

  • MD5

    994c6d2ca21689d3f7355ad02b573be8

  • SHA1

    9e641f4daf2cf29b460dc4771e26dcac6118eed6

  • SHA256

    e0c328d432c64f2c2f4d19f0a6abd0a77deaf8570336fa8a2bcdc8c5dc402008

  • SHA512

    624b609148c57c8d56622134deaf353eb9bae29952c5874234977940457ac7b597eda1bc289e721557cfd532dff23bbdc6b76f35dfa3ec6f880e9a338571ba6a

  • SSDEEP

    98304:jdZcIbjBIC6OR/J0FCKvlWbi2PtIqzhAB1ZZQMLoZgeOeIS+skRX:ZiIaC3Jg8bi2PY1ZQhZlOeIS5kRX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Xeno-v1.1.35-x64.rar
    .rar

    Password: L639760269600

  • Xeno-v1.1.35-x64/Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    Password: L639760269600

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.35-x64/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    Password: L639760269600

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.35-x64/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    Password: L639760269600

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.35-x64/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    Password: L639760269600

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Xeno-v1.1.35-x64/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    Password: L639760269600

    922bafe27c5681b864aef9beedb388a2


    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.35-x64/Xeno.exe
    .exe windows:6 windows x64 arch:x64

    Password: L639760269600

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Xeno-v1.1.35-x64/XenoUI.deps.json
  • Xeno-v1.1.35-x64/XenoUI.dll
    .exe windows:4 windows x64 arch:x64

    Password: L639760269600


    Headers

    Sections

  • Xeno-v1.1.35-x64/XenoUI.runtimeconfig.json
  • Xeno-v1.1.35-x64/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: L639760269600


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.35-x64/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.35-x64/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.35-x64/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.35-x64/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.35-x64/api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.35-x64/api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.35-x64/api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Xeno-v1.1.35-x64/bin/Monaco/index.html
    .html .js polyglot
  • Xeno-v1.1.35-x64/bin/Monaco/vs/base/worker/workerMain.js
    .js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/basic-languages/lua/lua.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.css
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.js
    .js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.de.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.es.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.fr.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.it.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.ja.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.ko.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.ru.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Xeno-v1.1.35-x64/bin/Monaco/vs/loader.js
    .js
  • Xeno-v1.1.35-x64/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    945163dff22f51600d06a0b23fe994e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.35-x64/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    a68e19b72bf615dc5689a862e51c72dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.35-x64/msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    8fe8ee8466472be6c8207404ee8d1c05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.35-x64/runtimes/win-arm64/native/WebView2Loader.dll
  • Xeno-v1.1.35-x64/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.35-x64/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.35-x64/scripts/Dex.lua
  • Xeno-v1.1.35-x64/scripts/Infinite Yield.lua
  • Xeno-v1.1.35-x64/scripts/Sine Wave.lua
  • Xeno-v1.1.35-x64/scripts/Spinning Donut.lua
  • Xeno-v1.1.35-x64/scripts/UNCCheckEnv.lua
    .js
  • Xeno-v1.1.35-x64/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f91c705cf579114968b3edc12e1175e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xeno-v1.1.35-x64/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    72707e942878aac770fcc118ce3ec1c9


    Code Sign

    Headers

    Imports

    Exports

    Sections