Xeno Executor[.]zip

General

Target
Xeno Executor.zip
Size 3.4MB
Sample260823-km5basvdpg
SHA256 a6c201162f6c355c6fe9bcecd9f5f4585f44348e902ea795d2ba0133042b59eb
MD5 aeef42d7a227b0ab6cc3acb277b96bf0
SHA1 2afd2576341435e5fa0f6a688f8c1899d0922a2e
SHA512 f88ee418e4080aed8204c8fef4cf2ef5e055c955746bcb9fd7e481543937ee0d6c7d4e320af14decc5245a4356922f0103d43b7bdfa1d035265010ee02475801
SSDEEP 98304:NlxMwHyqrbIQypqtJ6vDKrXrJmpRukWCJoioei:3xMUywIxEJ62rX4RukWKLoei
TLSH
T14BF5331EB66B0C3B9EF7422407E59080D3A6AC416F1FD7DDB22DCB82046E2CA75DD466
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/Bootstrapper.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Bootstrapper.exe

SHA256 a6c201162f6c355c6fe9bcecd9f5f4585f44348e902ea795d2ba0133042b59eb
MD5 aeef42d7a227b0ab6cc3acb277b96bf0
SHA1 2afd2576341435e5fa0f6a688f8c1899d0922a2e
SHA512 f88ee418e4080aed8204c8fef4cf2ef5e055c955746bcb9fd7e481543937ee0d6c7d4e320af14decc5245a4356922f0103d43b7bdfa1d035265010ee02475801
SSDEEP 98304:NlxMwHyqrbIQypqtJ6vDKrXrJmpRukWCJoioei:3xMUywIxEJ62rX4RukWKLoei
TLSH
T14BF5331EB66B0C3B9EF7422407E59080D3A6AC416F1FD7DDB22DCB82046E2CA75DD466
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123

SHA256 800f03f520cb70bfb8a9715021179d710c246b131e611e30cb348b7f9c4e4dcd
MD5 9e347ca51ce4e3fbd212bb12a4251242
SHA1 943ce0638dfb6545cf3d82d944a443618b402bff
SHA512 e628d64278b3801165dc80be41a89ada8fd2bca71da8002760f1c9c46810d1b0d8c4e00323bd02a0a030499b0c5b5936a91858b9108679f5b94776379eb30183
SSDEEP 98304:pepquqWVDJIvEUpq1uumBsXEgdZn2Tf4jt:2qDfvR01uumiUgdZ2Tf4jt
TLSH
T1B2F533492DED7940F1E396B15E847DB996EE080B598874C482DCCC2FA2B22D46DCDBDC
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12897200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths