Static task
static1
Behavioral task
behavioral1
Sample
Win-XwormRat-V2.1-builder.exe
Resource
win7-20221111-en
General
-
Target
Win-XwormRat-V2.1-builder.exe
-
Size
928KB
-
MD5
3f0912415a057271df74d28140102c2b
-
SHA1
9bc6ee308cb00e4898f3730e933ccb6fa1531366
-
SHA256
6b51cfb8710886fbff64eb1482c0de89bf9075f97dd01b8474f7e60fb362d1b2
-
SHA512
9847c7a2bf6d773e8d2855c14c9266040cf9b8c05b667418eb36f9fb4c76740cbe1cd7a16d85fe04206af85e062bb7d75dd6c0fc23193f86123e24e759b6ed49
-
SSDEEP
12288:C8pICumxgLj3PSg+Gfqxk01P6RNGZS7yK8g3dv8BOEBkCtip/y6Lr9vXjdkpgLMk:A1ixARrLlH/1q+
Malware Config
Signatures
Files
-
Win-XwormRat-V2.1-builder.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 820KB - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ