Static task
static1
Behavioral task
behavioral1
Sample
XWormV52exe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
XWormV52exe.exe
Resource
win10v2004-20231215-en
General
-
Target
XWormV52exe.exe
-
Size
9.1MB
-
MD5
5b79b15bae6b271a9b269d00be6963e3
-
SHA1
c0f6d275d65f37ec46399a8412673e25ca6d3db1
-
SHA256
7f8a8e37000d3efc3daf8e6d2d7bb64e67766022f50ee406bc18c642c3bec166
-
SHA512
88729eae32f94fb48f5a0ce51bd53a65f2b5620a635244318a346c4c4d5e2555b373b9001b9bb9ed437cc976aec913113623f94f1b5b5286f1ff2448cd1627f4
-
SSDEEP
196608:oOdkWMB1TCCAaa/f+cUhBLHK1gzaFsKnULGZ3d/VRyDhwymXeexoAxG:oK2B1CkcDUDLHK18as0mcvow+Ax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XWormV52exe.exe
Files
-
XWormV52exe.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.0MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ