Static task
static1
Behavioral task
behavioral1
Sample
XWorm V3.1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
XWorm V3.1.exe
Resource
win10v2004-20230221-en
General
-
Target
XWorm V3.1.exe
-
Size
7.2MB
-
MD5
6ac5dddbfb5a304c842c4bd5987384cc
-
SHA1
fdfd83d17be668aff5059fb31d510644db80dcf5
-
SHA256
f2e8d9ed420790f4d8599ed37f4add1ca2d91fe46a0b610c4099bad58e9fe621
-
SHA512
2f1efbcdf2b263645411e505f3849469702082b46e34bc70eb501f8f9f838193ab8ba06fa107d339b7c5081e878e3d34b60d94b7ade0c0da5023a56a5eee9949
-
SSDEEP
196608:TLQ6B/XKUDz9NoUXJzUWi7MYjBVvo5/UV:fFlaU/9NZXJZinjB9oxg
Malware Config
Signatures
Files
-
XWorm V3.1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7.1MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ