Xworm+V7[.]0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Xworm+V7.0.exe
Size

15.5MB
MD5

d8e168a28df4c3b07f3aa33251eb9973
SHA1

a201db9b5593a1290e4feaa72ee7f0e246cbd5eb
SHA256

e325de946ae78c2063a281903a819a84915411b2b0a1beb5fbb8dd6dbb60acc0
SHA512

0c8a08d0afcf94c3361287dfb59a0b089d5908136ed657ceb9d3c94fc6d7149879ae0dad987e9e302630ffe3651769b27a31676fa1b44ca298ede07fbc8a28f9
SSDEEP

393216:/z/DJJoIRv/PiktGiZis6mjSkPQ+GvRRJf:/Ho2iqRsskkPQ/5RJf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xworm+V7.0.exe

Files

Xworm+V7.0.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Password: skibidi

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.3MB - Virtual size: 15.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ