Behavioral task
behavioral1
Sample
9c885077bc30da7d5f460afc95e0acb427a450b96c79da46b579dfe906be951b.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9c885077bc30da7d5f460afc95e0acb427a450b96c79da46b579dfe906be951b.exe
Resource
win10v2004-20241007-en
General
-
Target
9c885077bc30da7d5f460afc95e0acb427a450b96c79da46b579dfe906be951b
-
Size
56KB
-
MD5
83c04a03a447d4c370de213f14c870c7
-
SHA1
03d9a7e4083ff7c1c548faba220c1bd3b2002b47
-
SHA256
9c885077bc30da7d5f460afc95e0acb427a450b96c79da46b579dfe906be951b
-
SHA512
a6b8a05bec455d54bdf97a3accf0486bfb0de4d80f1c23786494694d78a1d3e96400a4de64673e866edd96ce07b0484ff7070a2a559e05eafa7bc168798602d6
-
SSDEEP
768:2LkDwJ/o00T1f/GCpWdFC9hV6VOjhE/H+c:2LkDMoVTFJpiFC9hV6VOje2c
Malware Config
Signatures
-
Detect Xworm Payload 1 IoCs
resource yara_rule sample family_xworm -
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c885077bc30da7d5f460afc95e0acb427a450b96c79da46b579dfe906be951b
Files
-
9c885077bc30da7d5f460afc95e0acb427a450b96c79da46b579dfe906be951b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ