Behavioral task
behavioral1
Sample
loader_1.exe
Resource
win10v2004-20230220-en
General
-
Target
loader_1.exe
-
Size
50KB
-
MD5
935f44677afd746280af92052805793c
-
SHA1
f03b5a9eacf210fd38079c152b4399e6e2cfd9a5
-
SHA256
44ed87bca739bea9b8ac2521678b89a2721c828954ddb1e6ab0ea53dabee2571
-
SHA512
70df5585a576631f278ef619aa349088ad2d7aef99d9c028ebc24f29dfb7a71f4d0cd028dfb50eee332e870595586d67cb7166d7f1669759f818997daa98f4f5
-
SSDEEP
768:aKTeORI+AXZHpRrgBNFG6xJ65h0zb6bqaeHqrYAkCOoWyhiaJqXXt:aKhlAXXRrgBW5qzb6bqaeKrYAFOoXCN
Malware Config
Extracted
xworm
system-headed.at.ply.gg:7113
-
install_file
USB.exe
Signatures
-
Xworm family
Files
-
loader_1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ