Copy URL toClipboard
Export Results To PDF
View Virus Total Result
Kill Chain Report
Send To Human Expert
Analyst
Object to Human Expert
Analysis Verdict
 |
| Malware |
Xcitium Final Verdict |
File Name: LixoDestructive.exe
File Type: PE32 executable (GUI) Intel 80386, for MS Windows
SHA1: 2add11e25d07dc9e154ae1be916c869804047146
MD5: 7d538a430eb4e0bfd7671b921a8b76a1
First Seen Date: 2023-05-02 13:15:25 ( )
Number of Clients Seen: 4
Last Analysis Date: 2023-05-03 18:55:31 ( )
Human Expert Analysis Date: 2023-05-03 18:54:37 ( )Human Expert Analysis Result: Malware
Verdict Source: Valkyrie Human Expert Analysis Overall Verdict
Analysis Summary
| Analysis Type | Date | Verdict | |
|---|---|---|---|
| Signature Based Detection | 2023-05-03 18:55:31 | Malware | |
| Static Analysis Overall Verdict | 2023-05-03 18:55:31 | No Threat Found | help |
| Precise Detectors Overall Verdict | 2023-05-03 18:55:31 | No Match | help |
| Human Expert Analysis Overall Verdict | 2023-05-03 18:54:37 | Malware | |
| File Certificate Validation | 2023-05-03 18:55:31 | Not Applicable | help |
Static Analysis
| Static Analysis Overall Verdict | Result |
|---|---|
| No Threat Found | help |
| Detector | Result | |
|---|---|---|
| Optional Header LoaderFlags field is valued illegal | Clean | |
| Non-ascii or empty section names detected | Clean | |
| Illegal size of optional Header | Clean | |
| Packer detection on signature database | Unknown | help |
| Based on the sections entropy check! file is possibly packed | Clean | |
| Timestamp value suspicious | Clean | |
| Header Checksum is zero! | Suspicious | |
| Enrty point is outside the 1st(.code) section! Binary is possibly packed | Clean | |
| Optional Header NumberOfRvaAndSizes field is valued illegal | Clean | |
| Anti-vm present | Clean | |
| The Size Of Raw data is valued illegal! Binary might crash your disassembler/debugger | Clean | |
| TLS callback functions array detected | Clean | |
Dynamic Analysis
No Dynamic Analysis Result Received
Behavioral Information is not Available
Precise Detectors Analysis Results
| Detector Name | Date | Verdict | Reason | |
|---|---|---|---|---|
| Static Precise PUA Detector 1 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise PUA Detector 4 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise NI Detector 3 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise PUA Detector 5 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise Trojan Detector 1 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise Trojan Detector 3 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise PUA Detector 6 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise Trojan Detector 12 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise Virus Detector 1 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise Virus Detector 2 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise Trojan Detector 13 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
| Static Precise PUA Detector 2 | 2023-05-03 18:55:27 | No Match | help | NotDetected |
Advance Heuristics
No Advanced Heuristic Analysis Result Received
Human Expert Analysis Results
Analysis Start Date: 2023-05-02 14:36:26 ( )
Analysis End Date: 2023-05-03 18:54:37 ( )
File Upload Date: 2023-05-02 13:14:41 ( )
Update Date: 2023-05-03 18:54:37 ( )
Human Expert Analyst Feedback: -
Verdict: Malware
Malware Family:
Malware Type: Trojan Generic
Additional File Information
| Property | Value |
|---|---|
| compilation time stamp | 0x64223EF1 [Tue Mar 28 01:12:17 2023 UTC] |
| debug artifacts | |
| entry point | 0x407f6d (.text) |
| exifinfo | |
| file size | 484352 |
| file type enum | 6 |
| imphash | |
| machine type | Intel 386 or later - 32Bit |
| magic literal enum | 3 |
| mime type | application/x-dosexec |
| number of sections | 6 |
| sha256 | 3a4ea5e72e50bcba550efa034818f35785076adb37af4c1cee9374fe9e013ec1 |
| ssdeep | |
| trid |
| File Path on Client | Seen Count |
|---|---|
| LixoDestructive.exe | 1 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | MD5 |
|---|---|---|---|---|---|
| .text | 0x1000 | 0x489d0 | 0x48a00 | 6.63352370442 | dd7150650ce709ab2dc703342af33dc7 |
| .rdata | 0x4a000 | 0xf69c | 0xf800 | 5.75183497883 | 7c186d4c6b5714ed3bf4f4f081dd4755 |
| .data | 0x5a000 | 0x1cf0 | 0xa00 | 2.46526476329 | 0fe90a099face26e50573e8f8f491640 |
| .msvcjmc | 0x5c000 | 0x16 | 0x200 | 0.255742020076 | 85bb7567c9540c02a36ab2534359c3af |
| .rsrc | 0x5d000 | 0x1a4b8 | 0x1a600 | 5.95991151638 | a4944c494e0465bf8a3bac0c21fd686c |
| .reloc | 0x78000 | 0x2b60 | 0x2c00 | 6.69701565351 | e0240d393546e7014d03aa140aacd7ef |