Behavioral task
behavioral1
Sample
iexplore.exe
Resource
win7-20230220-en
General
-
Target
iexplore.exe
-
Size
146KB
-
MD5
d3e04c8ad2bbb25980280b6b7953a8ac
-
SHA1
5ee3c73d56b8532bf8a924beb97b8b4a6309049a
-
SHA256
56bb387ebb9827dc35af716e99bd8e3d2b4918027fac5b22316357be811029cd
-
SHA512
0baa9743d84ebffcabdf483b5d676551a98ff60804d06b41acd2e66ae4c4cedd230389b1fd75d9a5386e4996f9d3af7ba52d6a7c55fcd1f95f4309fa60968e19
-
SSDEEP
3072:ENWpPp0vkIxZbv0XvoF76B8ObSyvsVlWN97u9bK6Sz0cAMSCboTi4:waPp0MI3bYwFude9G6DMz
Malware Config
Extracted
xworm
classic-lovers.at.ply.gg:11647
-
install_file
iexplore.exe
Signatures
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource iexplore.exe
Files
-
iexplore.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ