26ee1ff8717e3d07694f43474cdd042b03f6f9211f74662c0d37683a3f22b8d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26ee1ff8717e3d07694f43474cdd042b03f6f9211f74662c0d37683a3f22b8d6
Size

6.2MB
MD5

be4a3e57cf96db214f64c0de02f54974
SHA1

01e491ee428914d79db230f4f2cf97f388b5b279
SHA256

26ee1ff8717e3d07694f43474cdd042b03f6f9211f74662c0d37683a3f22b8d6
SHA512

38d439abed6978db49c2c9f8fcdea77afa7cd6c7d8adfe35e6162cfbb2245b6f8aabda663e4cf500b4bdc3fb34897ca2e2fd77bfb0be1d3f1966f954414d9e6e
SSDEEP

196608:wu/F6Q227uhBQTFpGG/j5DadvL77lbKEq64M:17xu8Fd5edX7R4M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XWorm V3/XWorm V3.exe

Files

26ee1ff8717e3d07694f43474cdd042b03f6f9211f74662c0d37683a3f22b8d6
.rar
XWorm V3/XWorm V3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ