Static task
static1
Behavioral task
behavioral1
Sample
payload_1_sxr.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
payload_1_sxr.exe
Resource
win10v2004-20250129-en
General
-
Target
payload_1_sxr.exe
-
Size
10.3MB
-
MD5
a0986241fcfed849a9d1dce2466840de
-
SHA1
6e47f0378ab7c921b3c04d29aae5de1415d1aaf8
-
SHA256
ac562299cd216585d58cab4c435c1578f3e451820a4c0feb2d902d0662645446
-
SHA512
8e192128a7be9b6b0857a3eca1a479ed28eaae2943ae1803fdd4b523c57e106f089c6b04cfe318a757171a3e52a603d91d395f94adbf9d5d5f300b3d91311ca4
-
SSDEEP
49152:sKxzaVKJayp/GrDlGcfk/5ZRuUtNUDrTRaDqeF5gLRyoKq6XBkim7fEM27cIgpvW:sKxzcK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource payload_1_sxr.exe
Files
-
payload_1_sxr.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 10.3MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ