XWorm V5[.]2 Resou_nls[.][.]scr | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XWorm V5.2 Resou_nls..scr
Size

43KB
MD5

bf190f61e62950a687c8413ba34eec9b
SHA1

38e7d97dd99dad54debc1d8d0974a5c0118ad7db
SHA256

076cc9c3a9065463d84ba8fdb43b0955ca620774ad7da529c45f3c7652742a27
SHA512

9bf71b3da55816811e53985fc76528a4ad91bd021724821977494d6600de2e44776105e537177a5de52eebb8e7e3920c2d65301e8474a667295bf73bb388a545
SSDEEP

96:dirZi8MrZxYISndP4z5kdc6PkBNNlRGGadekHytUZfLJh6OZZR/YmWZrzNt:digR1fcPLG7qfLJh6OZ4mWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XWorm V5.2 Resou_nls..scr

Files

XWorm V5.2 Resou_nls..scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ