Behavioral task
behavioral1
Sample
MicBooster.exe
Resource
win7-20230703-en
General
-
Target
MicBooster.exe
-
Size
202KB
-
MD5
8fe68cfff88d363a3c22d5b0aaaa1a51
-
SHA1
d4e6f31f7acd80d65f5b527ab1e00d67e36966f4
-
SHA256
d6b2f0c7a1ffccfe274d9bf1d86b89d514f27054f80eb7bdbfc3c5646b9aa526
-
SHA512
3f8cd3ecb40772bac14a78fdde28f14fe4568f60478b5c9b7bd13cdd60b1a61afcff68289b53f8fab2cab228240e2f3b5d3c5ed102270a8411cbe29e884fe35f
-
SSDEEP
3072:TJVXWFY90sOMqG8SKfbzxcwg7es6/Vsb8VKTup49oJMfF/H9N3Ky9NzLn0:TJuY9mGUhcX7elbKTuq9bfF/H9d9n
Malware Config
Extracted
xworm
an-encoding.at.ply.gg:45586
vTYB0LsxK0WwJNc8
-
install_file
system32.exe
Signatures
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MicBooster.exe
Files
-
MicBooster.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ