Behavioral task
behavioral1
Sample
download.exe
Resource
win7-20230220-en
General
-
Target
download.exe
-
Size
33KB
-
MD5
4053f1c3a147c3180f5eeee223e12c75
-
SHA1
85a9cc3298461e1b218e8e2a84c19bf24f3ef096
-
SHA256
30659ba72c4977c6017c45a45909442417c5bc07e7f3a2392b352d29494cb226
-
SHA512
6d22143493860bc52d2988ef795bda8200a1288ab6c30a9465722d789e89b0c81c4aafedfb2aeb56918ff86b3b5d71426551f9c75ae4e4ac62baacd9d7de6c86
-
SSDEEP
768:/rAKdijXMwX1eJGl8y0UaKt4qlYU/kZl+Bcg4tlTF592hO9hASURS:/UjXMwX1eJGl8y0UbTuUsZcB54HF592E
Malware Config
Extracted
xworm
185.225.73.47:2222
KYUBwRMqaq7iQrSm
-
install_file
USB.exe
Signatures
-
Xworm family
Files
-
download.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ