Xworm v3[.]1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Xworm v3.1.exe
Size

25KB
MD5

c10f31dd05366bc74f8122307a04a113
SHA1

a73dd14c7e579ef7122775d2392a1cc17d500448
SHA256

5e625ae121b5b11c168921bac85fcbda84ae27131558de1988a6fbc0019bf19f
SHA512

b7d73c1326356e9242ef28baee40933411264571e521babdb7c9bf42f934bb0b8f382406ed52bcf9ad3a482553e441269cb7f154f3c2954074471fc34a6f6e73
SSDEEP

384:qLiL7wHqUtQOEQumpSsGlq/iICO2nFa3zmLT2gPpZw3k5MW1O4Yahqrj1hKmvCv7:0iLcKUqQuW04/rCnfP/Xh2j1hKeCv7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xworm v3.1.exe

Files

Xworm v3.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ