XWorm V5[.]4 VIP[.]exe

General

Target

XWorm V5.4 VIP.exe
Size

13.8MB
MD5

065a8d7fad2ad13b9f04de982294eb21
SHA1

7ecf3a3b1a0fa25f701787d98bd42c6f39c2f8ce
SHA256

3b2f28e621af3ea54abf28071e2f36143a30aa87a091f0ee3764c15b2dea4303
SHA512

0b828b1e545326258f46b7b0c535bfde1fff5ab4bf43bc729803a96e81f4b29a5d0e5a00e59ae392d517051dba37abd5f3b4dacc348242475cfa9e8cbfa16e34
SSDEEP

196608:msZttF81Wco24/vt8Kf67RQCTbJev4Z4t2WL8PSlsZA6G:mEtM1VR4cRZ0QZaL8qlsZVG

Score

7^/10

agilenet

Obfuscated with Agile.Net obfuscator 1 IoCs

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

resource	yara_rule
sample	agile_net

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XWorm V5.4 VIP.exe