Xtfmrvcwu[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Xtfmrvcwu.exe
Size

29KB
MD5

654475d8c1d480ec35da987d8803fa2d
SHA1

f3a577724fea18bc2b8cb3012ce2e2b4dc5c796b
SHA256

205ec3a913c4138ebee48bf2f583cec1d501494cc8aa25a01c19a8d4e2182f00
SHA512

9a7f05e9e4cd49b1bb5331d17ca6c83efb004c0da58889a517d6bcfd4bd2845807cc37d3e52788a73025655fbef882f3bb9fb82550c29b6a8f9dd33ceac5fc4a
SSDEEP

192:WrcZBNu0gZzHhaFzQxSKM+QYo03AiP110se9eae3e3eae8ehezlTSBPxSqDu3SDX:3pcDhkQxSKW03AU1g8PxlaCDfmI8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xtfmrvcwu.exe

Files

Xtfmrvcwu.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ