XWormLoader 5[.]2 x64[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XWormLoader 5.2 x64.exe
Size

367KB
MD5

dcd670f362c26a97c83df52e708d2192
SHA1

8719bead8561c223f59a245769a6cd62e315cfc5
SHA256

e73f198b3acf8dd1dfc93065b55ad3557f85ec83443a340a9daa3bd544a33715
SHA512

be22fa571406210ddcaa3eb49abd7672090ac58de45f4022494cd196f8ee0cdfc471aa647ba15a1e79357631bad25e7f30d3d0177d94d85b41fec3fa7539523f
SSDEEP

6144:bTW+cC2A/DdnW9HOvOz+KcobcL82PHueqADqm:G+cCHU4vOurI2vueq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XWormLoader 5.2 x64.exe

Files

XWormLoader 5.2 x64.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ