WindowsXPHorrorEdition[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
WindowsXPHorrorEdition.exe
Size 51.7MB
Sample260828-psrdvaxgpg
SHA256 83ddf34331d00285918cff184a6a8ff26fc8d6682018bdee6cf54cb7824fe8d8
MD5 e1dfc4f445c9d5eb075009970c116128
SHA1 46b9604d6c5cd96204bf51a754520003455f1aa3
SHA512 fec0cde77d6accba6976b3864302ba801f450df440bbc8b38386bc3fbf2cf3b12773d04c32480f67ede4396bafe3a34b0500d776d9d7d489c466eac80b2180de
SSDEEP 1572864:AKsj6R2Q/mBlOYlGLTHY9G4FEujFMm+B997DaNHN1oS72fnD9hRzZ01tO0DpvrvI:C6WcLjY9G4FEujFMm+B997DaNHN1oS76
TLSH
T172C72263D103CA19E9850B328A82791B0A60B90CF97B551EFD5CFF45F27730D399A3A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsXPHorrorEdition.exe

File Explorer

WindowsXPHorrorEdition.exe

.exe 51.7MB

WindowsXPHorrorEdition.exe

SHA256 83ddf34331d00285918cff184a6a8ff26fc8d6682018bdee6cf54cb7824fe8d8
MD5 e1dfc4f445c9d5eb075009970c116128
SHA1 46b9604d6c5cd96204bf51a754520003455f1aa3
SHA512 fec0cde77d6accba6976b3864302ba801f450df440bbc8b38386bc3fbf2cf3b12773d04c32480f67ede4396bafe3a34b0500d776d9d7d489c466eac80b2180de
SSDEEP 1572864:AKsj6R2Q/mBlOYlGLTHY9G4FEujFMm+B997DaNHN1oS72fnD9hRzZ01tO0DpvrvI:C6WcLjY9G4FEujFMm+B997DaNHN1oS76
TLSH
T172C72263D103CA19E9850B328A82791B0A60B90CF97B551EFD5CFF45F27730D399A3A9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

691936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

672KB

Virtual Size

671KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

36B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

50.9MB

Virtual Size

50.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

WindowsXPHorrorEdition.exe

generic