Xworm Client Fixer[.]exe | Triage

Sharing

General

Target

Xworm Client Fixer.exe
Size

7.7MB
MD5

578187de072dd878bb35a7470b0041c6
SHA1

06c3c1eef478ba1c6961e75631722f1bec71f219
SHA256

6603341c43b8f511194d08b846f858acf82552d7a3487e2f183c8a8f0e0d53cd
SHA512

986b9e11d529db106880dfdb51b2e386a9f00fe5946965cdca8c9e7f129cef1df1dd9bd218269a770cac8b6cfa43a9b4476024f0578151b1ae3de6cd20913e61
SSDEEP

98304:MRB82S1mjR8wNPvzqv1dJ3aN5p1z+HH/1A7LkQgYGJo6DXbvCIco+3Gz9/Sd3+jk:+8luhW1dJqN14NapK9rCY+C96A3Xpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xworm Client Fixer.exe

Files

Xworm Client Fixer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ