Behavioral task
behavioral1
Sample
SecuriteInfo.com.IL.Trojan.MSILZilla.25629.12905.1460.exe
Resource
win7-20230220-en
General
-
Target
SecuriteInfo.com.IL.Trojan.MSILZilla.25629.12905.1460.exe
-
Size
53KB
-
MD5
64557121d459383777f4c4f5c611e59b
-
SHA1
c59a07cfb7f6268ed914137528fdfa857d20c1d8
-
SHA256
415368c42994976a96d870c801364a58a56ace26be19dab123bb0c45f788c105
-
SHA512
0409479575d93317b62518f028daeba2cabd7f0ccd91389da88c4c076b5adf18c1b9999e5f086393d82ca7c7a0789806d5079d549d2b5e2da0bee4e8484f5d62
-
SSDEEP
1536:5MZ6O2pAM4xs2P0IK5us4o9Fb2WPsM+Ofnxcx4v:Tj2PVK5us4o9FlPsM+OZ
Malware Config
Extracted
xworm
jjcDBygdHXnsJ5oY
-
install_file
USBDriver.exe
-
pastebin_url
https://pastebin.com/raw/fB4ZyQEn
Signatures
-
Xworm family
Files
-
SecuriteInfo.com.IL.Trojan.MSILZilla.25629.12905.1460.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ