Behavioral task
behavioral1
Sample
1c2989fe2487a431fe2e067c6a807ace9697eabf8d61e9d7ac3c78cd3847d3fb.exe
Resource
win7-20220812-en
General
-
Target
1c2989fe2487a431fe2e067c6a807ace9697eabf8d61e9d7ac3c78cd3847d3fb
-
Size
41KB
-
MD5
dd16c0af5dbfce7021b93b026bca8fcf
-
SHA1
cb9119b5cb376e85f2c2ef9f7d775af6f5fa6131
-
SHA256
1c2989fe2487a431fe2e067c6a807ace9697eabf8d61e9d7ac3c78cd3847d3fb
-
SHA512
b78e62a4a3fef38e895e2fb0e778dd68ae4d096af6cb6be954f684a09d43f90205ab4415da8d4ca2c62c91570968fccde85c284ba0268a14cc27fb8393351dc4
-
SSDEEP
768:qHkve9dejqpoeVUAfSVoR30Rp0wRb0sQhLOIwoE/6/F:6kveSqp6x9RRE1OuE/6/F
Malware Config
Extracted
xworm
193.161.193.99:43625
eS0TLbuxavrXm73n
-
install_file
USB.exe
Signatures
-
Xworm family
Files
-
1c2989fe2487a431fe2e067c6a807ace9697eabf8d61e9d7ac3c78cd3847d3fb.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ