DecryptXWorm Resou‮nls[.][.]scr

Sharing

Copy URL Twitter E-mail

General

Target

DecryptXWorm Resou‮nls..scr
Size

53KB
MD5

6375514f7446bfcfbef5439ebbf0d390
SHA1

2df731d73a3daee7f02e4a4f57940243b7c5c2c9
SHA256

4d81ee8d732c0428a5fd5de44209cf26f87ccc3c4002b69b26cd50fb5e41cd3f
SHA512

7beef02891895767fe4f4cb1554022c5fd936218c3012d434118e05859f1a336d2a6bc1c998fac6b465348313c5d55d51dc1aea85ffb6eb92ec75dc04a0713e1
SSDEEP

384:c/7LTzJhM4mWNXzuHRN7rpb045DNR9zO0q:cD3z/JNza1b9z

Score

1^/10

Malware Config

Signatures

Files

DecryptXWorm Resou‮nls..scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a2:9d:9f:b3:25:69:d8:22:43:b6:6a:10:09:73:44:dd:57:21:cf:9a:1d:43:43:76:55:0f:34:c4:d0:71:d4:e7
Signer

Actual PE Digest

a2:9d:9f:b3:25:69:d8:22:43:b6:6a:10:09:73:44:dd:57:21:cf:9a:1d:43:43:76:55:0f:34:c4:d0:71:d4:e7

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4dCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

a2:9d:9f:b3:25:69:d8:22:43:b6:6a:10:09:73:44:dd:57:21:cf:9a:1d:43:43:76:55:0f:34:c4:d0:71:d4:e7Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 2KB

.rsrc Size: 39KB - Virtual size: 38KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a2:9d:9f:b3:25:69:d8:22:43:b6:6a:10:09:73:44:dd:57:21:cf:9a:1d:43:43:76:55:0f:34:c4:d0:71:d4:e7
Signer

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 512B - Virtual size: 12B