XWorm V3[.]0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XWorm V3.0.exe
Size

7.5MB
MD5

6c8d7a137d72f7e86aed46e25f3ce741
SHA1

3c50858d12c7dfd3840d83615d95a8be854e56f5
SHA256

e4871f991040f5e1973dfaa12bbee4e3a1d1262e1604686f859805e821e2b1c9
SHA512

ac766c0a7045869ad85c9707b497baccc817bf408fa27a8ba725f86aa18ce642d26e973bd1bf3b5f10022fb5b1935ec0bd71709c5cc35e889d998d9e25e675c9
SSDEEP

196608:x8sWhrWD4S0CgsXmt8AIIlV7quOPMYroHXQ49P2L72heGd8u0MO6pi58Ncc:x4SIs2t898VWuM8Xb9OL6Hd8u056I58K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XWorm V3.0.exe

Files

XWorm V3.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ