Random xworm client[.]exe | Triage

Resubmissions

16/08/2024, 23:30

240816-3g43fstgle 10

16/08/2024, 23:25

240816-3efbbaxcpr 10

Sharing

Copy URL Twitter E-mail

General

Target

Random xworm client.exe
Size

7.7MB
MD5

07d97da9308aa19cf2feffd9ac483921
SHA1

31f971cfbd1c997180a77f353ef9c06ee5bee35c
SHA256

fa91e6e3eba2e4deb6ff092b9bf94944ce12b9346d5db218497602d08098094a
SHA512

970d236968d9a29ad21c56d1d17a8dd3803bb2d432d4a20f7eec8903a570bd2d1e9036c3d131836d59124f21e88100ec9b6d992a86a7d0a1c0c007e113a3f438
SSDEEP

196608:6KLCFU/jHq/puROyhxeyOC7+oiRkbtejBe5:6mq/pkOYxehohbt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Random xworm client.exe

Files

Random xworm client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ