General

  • Target

    0x0008000000015d5b-14.dat

  • Size

    41KB

  • MD5

    db5db9d201742ad2d9aee11ae460d897

  • SHA1

    4e35f0e54ea2f13b0b1f3c447d76a9ad3700310b

  • SHA256

    71363ace078f866d191f74dfa1ab5118837fe3c62cd64465d1667acd51415676

  • SHA512

    06301410dab200d5ad04f7b6b336088588cf2e3e0ffe4685b7b5b937acd2e2d05246bd5bb04d29fce5650ac3f4c009952e1e6840d099634516531ca9d70197e0

  • SSDEEP

    768:GVa+vNtg+PB93Tw4xqdVFE9jBVUOjhAbLoCZYRT:ovNtgw93U4x8FE9jBVUOjKvTYRT

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0008000000015d5b-14.dat
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections