xwrormmrmrmrmrrmrmm![.]exe | Triage

Sharing

General

Target

xwrormmrmrmrmrrmrmm!.exe
Size

77KB
MD5

180322ce4140c08c6228c0a6a40fe9fc
SHA1

0500d69cd7937912a16a9cb715d97496ffbd755c
SHA256

2c0afb32a2b74768d6713c58b7235df3c8e07186c5e10969aa8b7433ecd5fc62
SHA512

2546e50cb956a1c052403141b153f71b6942a802874fe3ef0c385b32f6fedd3bbbf38e41ff0dd11353e7790cafd00ae376bbd6b12925760efae63af1960b797b
SSDEEP

1536:98RCa50LqXzpcJfAib0b1IiIs6i/tBYeb/FWza6RJBSO8zFqy2:d9JfAqi13Iri/tvb/6TSOEL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xwrormmrmrmrmrrmrmm!.exe

Files

xwrormmrmrmrmrrmrmm!.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ