XXNX[.]exe | Triage™

General

Target
XXNX.exe
Size 20.6MB
Sample260804-nbvt9sydlf
SHA256 615d1bfae9a5efa235ee4025b5bbbe4a2309886324acfab6fb223cd7134ed49c
MD5 8684cd8361601ae0c4b3346946a5c6a8
SHA1 37ffa59b077ca856ec5f02acf0ec7941bc2e14ad
SHA512 7931068847ac865ae82582dd9a68524efb3183db2c8aede6be29b6e9d8e4f6cb4cc79958a6740d7f5b516b661c8359e5ced513545e146c2624c213273a706bb0
SSDEEP 196608:3iaQAEPRwb7oUaQAEPRqvGaQAEPRwvdeoAoH2ifJOndhSZnDKqJL1kehn4iaGyB:Pawb0laqDaEeoAoH2iROndARka4iOB
TLSH
T12927CF02B6C18912CC7805B180134AA456F0BE4D5AA5EAEA74CC737C2BF76CDB5977F2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XXNX.exe

File Explorer

XXNX.exe

.exe 20.6MB

XXNX.exe

SHA256 615d1bfae9a5efa235ee4025b5bbbe4a2309886324acfab6fb223cd7134ed49c
MD5 8684cd8361601ae0c4b3346946a5c6a8
SHA1 37ffa59b077ca856ec5f02acf0ec7941bc2e14ad
SHA512 7931068847ac865ae82582dd9a68524efb3183db2c8aede6be29b6e9d8e4f6cb4cc79958a6740d7f5b516b661c8359e5ced513545e146c2624c213273a706bb0
SSDEEP 196608:3iaQAEPRwb7oUaQAEPRqvGaQAEPRwvdeoAoH2ifJOndhSZnDKqJL1kehn4iaGyB:Pawb0laqDaEeoAoH2iROndARka4iOB
TLSH
T12927CF02B6C18912CC7805B180134AA456F0BE4D5AA5EAEA74CC737C2BF76CDB5977F2
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\adela\Desktop\projectanciensrc\project\Dark Worm\obj\Release\XXNX.pdb

Sharing

General

Malware Config

Signatures

File Explorer

XXNX.exe

generic