Extra_Xiters - InternalMax.rar
- SHA256 6ad3114b6a9d2077dd9263358320bfb9c0cceb918be3755261d5ad2da1d67533
Static task
static1
1 signatures
General
- Target Extra_Xiters - InternalMax.rar
- Size 4.0MB
- Sample260925-vmq4sa1gpf
- SHA256 6ad3114b6a9d2077dd9263358320bfb9c0cceb918be3755261d5ad2da1d67533
- MD5 a23ba064aa4475597c6d6a57e7158d9a
- SHA1 99b51c133ccc1874b285724620fab1905a737f41
- SHA512 d63f89fb8725d696094a4ed1ae9e087775b6c0e92f4b3e7aadabf9cb5d35844839765eb0e7620e1c120e3e71ef6611e70d906c8a0abbd341d039533b5add151b
- SSDEEP 98304:OKPkCcktUqVShujAsHIVPwKic30rAArEWHJQHyzuY7E8S:vPYktUKxscOPwKMrAArEOJmyziz
- TLSH T1B41633F48847962A37624786D09CDA4ADB2DD838D2AC0007637DFF64AF997F70583197
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Extra_Xiters - InternalMax.exe
File Explorer
-
Extra_Xiters - InternalMax.rar.rar 4.0MB
-
Extra_Xiters - InternalMax.exe.exe 4.2MB
Extra_Xiters - InternalMax.exe
- IMPHASH aabcdb4f460def2651fb6c05697b45e1
- SHA256 e10ba5bb6c633dc652f2a36efed401686600c90f5ad8cc2a2621b52a7b58f563
- MD5 cbcf08a8b0007b971378a372a7f80ee2
- SHA1 2f6bc8b4385744be6dce01cdab863c8f7561b472
- SHA512 821e4786dd6f2a8ef3c7123d78e17675983f4379ff3b74822abdda1f1dd5502d86d6980fbba892d9ca23e18cf674dd2242d16532c923c6b2aaf55718d96e8231
- SSDEEP 98304:+YD+ENanK/2FVFCImLYVpX5/C8Pi9jH+9lpOoSjZRQ2veTE:+o+KaK+BDi9jH+4HheT
- TLSH T136162384598E1BF1E143EFB0514370BE712D3B89C4E41D1E738EAA406D6360A6E76F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3495165
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ws2_32
ntohl
normaliz
IdnToAscii
wldap32
ord60
crypt32
CertFreeCertificateChain
kernel32
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
advapi32
GetTokenInformation
shell32
SHGetFolderPathA
msvcp140
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
urlmon
URLDownloadToFileA
winhttp
WinHttpSendRequest
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__C_specific_handler
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
api-ms-win-crt-stdio-l1-1-0
_open
api-ms-win-crt-heap-l1-1-0
realloc
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-convert-l1-1-0
wcstoull
api-ms-win-crt-time-l1-1-0
_localtime64
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-filesystem-l1-1-0
_stat64
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
Name
.text
Size
Virtual Size
365KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.?+'
Size
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.PXM
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.r?O
Size
4.2MB
Virtual Size
4.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
469B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ