DeathWormv1[.]04[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeathWormv1.04.exe
Size

4.2MB
MD5

807dee6cf389fe7c50aef20dd8d4e395
SHA1

28b447bc4932e3ec0a7df950842f7bca57d6b2b9
SHA256

756579db0a3a0f2e4b9ffbb51277d82eefd2b5b50dca90c13ab02b77c80449aa
SHA512

f7a9fdd7f1e87eafb6fc672c37c80cca16ff19aab385eb6252cd365a7199f2371ac4ec001114a39912f24dba17523599d758c19d829c464a1a1c18c6465e1876
SSDEEP

98304:b+ahv1kiZBDE741vYCinEnBF5t/GEFql2JfVEb6eU:6a1D71TNnBFWAQQfreU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeathWormv1.04.exe

Files

DeathWormv1.04.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 435KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ