General

  • Target
    Xeno.dll.exe
  • Size 2.3MB
  • Sample260804-edjeksvwft
  • SHA256 f00f1e8b8752812f99965d6c660b2c09b23e1dc114cf045de859dc5a7d115daa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Xeno.dll.exe
    .dll 2.3MB

Xeno.dll.exe

  • IMPHASH bad7123b44ec3b3ee18687be55049f9c
  • SHA256 f00f1e8b8752812f99965d6c660b2c09b23e1dc114cf045de859dc5a7d115daa
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
4e:6e:9a:ae:89:fb:d2:21:71:70:44:9e:0f:d7:40:eb:48:92:01:69:96:ed:2b:ea:9e:52:a1:66:a9:db:bd:7e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Rizve A
Minor OS version
0
Major OS version
6
Entry point
1663936
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
C:\Users\rizve\OneDrive\Desktop\Projects\Xeno\build\Release\net9.0-windows8.0\Xeno.pdb