Behavioral task
behavioral1
Sample
2b85d858dd4b9048e32dbef51efdca4e3e1d3a70415b83af05901fcf4a1adc7d.exe
Resource
win7-20230220-en
General
-
Target
2b85d858dd4b9048e32dbef51efdca4e3e1d3a70415b83af05901fcf4a1adc7d
-
Size
30KB
-
MD5
7b96036c21d973d36df4b14ecd9697a0
-
SHA1
286ac15f5d686c66c727ef40738d9cc66c5aabbf
-
SHA256
2b85d858dd4b9048e32dbef51efdca4e3e1d3a70415b83af05901fcf4a1adc7d
-
SHA512
b82fef719e296fbe65d78c4c56c691a1c717d5d814a748b3f32d8519c95a81bee2af052516f64ce4ad77014e3154608d21f94d664caeb838eb6656e87c223c55
-
SSDEEP
384:IeAwIGmeffcbWICWv/0ILZGPcy0hYACSqRSMg2uRugtFuBLTIOZw/WVnvn9IkVuG:0ecbl/b3yMYAoRSF2uBFE9RGOqhybL
Malware Config
Extracted
xworm
127.0.0.1:4608
vA25qGyl0Maoo5Su
-
install_file
USB.exe
Signatures
-
IsPeFile 1 IoCs
resource yara_rule sample IsPeFile -
Xworm family
Files
-
2b85d858dd4b9048e32dbef51efdca4e3e1d3a70415b83af05901fcf4a1adc7d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ