General
-
Target
XClient.exe
-
Size
32KB
-
MD5
0d924e29e14f2a006b2ebef832ace2be
-
SHA1
428238dd2f1cff002e0c268a0d763b7f6bb7200e
-
SHA256
057e1b66c85a8a85f16ecaad912dec22e00da0ed7f6df2d63c248d6467b9e092
-
SHA512
bc411ee85f685b2fa382bbb761a22e7732bfe5c139aea56cdecee0fa85e9307829ec7c08120eca9fd2286cfdfdbb6c9e0fa1848a3f86b52d3272b9e0a27ae5ce
-
SSDEEP
384:TITG03aexgLBBlBaujqp6LkK5FaZcrKJMgpRFpiFBBLTsOZwtGzVvn9Ikuis2Isa:T83atlhqp+FP+Gg1pkFh9jjOjhtbci
Malware Config
Extracted
xworm
KGeNi12Yf71SpkGD
-
install_file
USB.exe
Signatures
-
Xworm family
Files
-
XClient.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ