General

  • Target

    eda1749ecd5d30aebc623e3ed3679e33.exe

  • Size

    149KB

  • MD5

    eda1749ecd5d30aebc623e3ed3679e33

  • SHA1

    36bac5bad466a15b4385bf1bc07e681682c277cd

  • SHA256

    fbbc0e3624e3fbe0cedff57c1e63f17855adb1c6b9fb83db9aec86b34e537134

  • SHA512

    d08fae35eb98f3d7c6a1dbff195510502d3c382cb2b59d8d1b46c44a5369924ac54bd1160808a28518bf121070b03c98471881f560e69f26df90be6b9b7320db

  • SSDEEP

    3072:mF1w5ZnALHQ1h18DI1+u5hIBzl+J3fu3/Xd35qVpUnTiuPA9QPOFqGxB1/D:UqjnALHQ1h18DI1++kObVpUnTiuPA9Qm

Score
10/10

Malware Config

Signatures

  • Detect Xehook Payload 1 IoCs
  • Xehook family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eda1749ecd5d30aebc623e3ed3679e33.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections