xworm | VortexBuild3[.]5[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VortexBuild3.5.exe
Size

68KB
MD5

4bef876a1fd0fa9e80fe20c4e3eefb77
SHA1

48191244b0432304e70ac8776180e6a3cde542f4
SHA256

b9eee8721e25925790290ef2b8e4f14c245dcdf6bb690bd26afa1ebc44058ea7
SHA512

875b2dd53763f03a34270c9e121f518ab95fef8ab871989c54d82ccd70fa4ea4bb815c5dcc0b296f6b64c482931206738c9e93eaf23c62c1c279a5d2f07243ac
SSDEEP

1536:NOoI+r1ucHir0+UXfPweZbH7HV/5c0rOsVcKXb4Dc5+:NOolxDHigbfIeZbHZxdOsV/r4Da+

Score

10^/10

xworm

Malware Config

Signatures

Xworm family
xworm

Files

VortexBuild3.5.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ