Behavioral task
behavioral1
Sample
MKijo.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
MKijo.exe
Resource
win10v2004-20230220-en
General
-
Target
MKijo.exe
-
Size
74KB
-
MD5
3e78164a024f153f4e537cec3b17aab4
-
SHA1
ff393808529a3c7e2984d2cf9990cc862e8230ed
-
SHA256
ea882543b6488fdf4ce81b8f91bd6136545afce60a99ff2f75381999dda8efe4
-
SHA512
9f219f9cad4b28d3397e5b3875a1967e74638ac4ef78a667df796f176f505596202c66fb97b5d5d4b9079d58832cfb8e9f58ffa259c3867585ab1e64b98500d0
-
SSDEEP
1536:yEXnJl8LROacPIcZnbEjE7mfG6kVu/F9OLuGqOn:n3Jl8ePIYbEjy4/F9OSOn
Malware Config
Extracted
xworm
animals-sewing.at.ply.gg:41503
-
install_file
Windows.exe
Signatures
-
Xworm family
Files
-
MKijo.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ