XWormRatBuild[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XWormRatBuild.exe
Size

1.3MB
MD5

3a981674b88abf17b2afa5f4095dfd4f
SHA1

f0a9128bab5c53730ae05608eaf32731b30b20b6
SHA256

eea6a8f81d21af8b06468dd944e8691d84e6164e8f6e4fa4f79ab26706f65b67
SHA512

a52f1011abf1caf236bf3172b754a796bb5b6cea1b01111188ca5a819ecffc0437372e3b3b28a373f19ce7a1e9a13da16fa371458621c436b3bad07a8b6c917a
SSDEEP

24576:UKsn9xKIM5Qb7uSh4zebL8s6PORVolk3oNDKEpvolywPioG/ymV1:UKsUqWSh4qL8sCllpBT1olRaomV1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XWormRatBuild.exe

Files

XWormRatBuild.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ