General

  • Target

    0x0008000000017409-14.dat

  • Size

    41KB

  • MD5

    6b29155af89e7015120e465c709ff4ae

  • SHA1

    1257c15a57f75033f2b1cf6f1f2030102c2dc49e

  • SHA256

    c76fc171ce39878229dd71a718fba352b9c139ad760c03b947fa027143d47705

  • SHA512

    3b3cd796527416177d9daf3bc43d0a81a90f0728467a1d779bb77eea1d9aa852b61196bfcbdb79cb416a62ac66dd6f151a6547825f97f3d2f90db68afd1540d5

  • SSDEEP

    768:ZVa+vNtg+PB93Tw4xqdVFE9jJ6OjhGbOoCZlK:RvNtgw93U4x8FE9jEOj0SXlK

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0008000000017409-14.dat
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections