General

  • Target

    804-9-0x0000000000400000-0x000000000050D000-memory.dmp

  • Size

    1.1MB

  • MD5

    ddc4c833b41b144ab5b9614f53f21def

  • SHA1

    8801e250bbb4285a3505b59934656add4b5ae70d

  • SHA256

    fe7b9afc76c3a749e59fe306bfe10492e2d5bda917d47f164e3dc88948e91e7e

  • SHA512

    16db6eaea3e594d4711d81a852785f42b76ac5621c87a0d4c7e892d4cc63362cd60daa60c41b57fe02ac83cfdc1bc44d3a7de42e5ad640f7d8ed9870f0389b51

  • SSDEEP

    12288:qMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9LmEJ:qnsJ39LyjbJkQFMhmC+6GD9

Score
10/10

Malware Config

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 804-9-0x0000000000400000-0x000000000050D000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections