Behavioral task
behavioral1
Sample
XClienttest.bin.exe
Resource
win7-20230712-en
General
-
Target
XClienttest.bin.exe
-
Size
31KB
-
MD5
67cdda3364bb6b2f63866117f13b4d79
-
SHA1
5717ad7f26bdabd762df3ec537c7ac58f34326ae
-
SHA256
92edef62579a23755b2eac21af028675f409bfdc9a283f35c8ceeda0a2b79570
-
SHA512
82c2acbbffbfaab64d9ab1d0a13263218f432d996a87d37648a7636a20bb5b9d5f2cf5cbc734f5618da4639bfdbca140fa5fc297a36d7f9c55ad0a99a5b5afff
-
SSDEEP
384:Y4sYMqC1y0O9/89I3/qjk8LlzwDs2ETIiMoR+gtFqBLTiZw/WNCvK9IkVu75xOjg:pC95/lEePMoZFr9RgOjhp/7vA
Malware Config
Extracted
xworm
stores-anytime.at.ply.gg:49821
HBuz1bAP6LssmHA5
-
install_file
USB.exe
Signatures
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XClienttest.bin.exe
Files
-
XClienttest.bin.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ