XWorm V6[.]5[.]exe

General

Target
XWorm V6.5.exe
Size 9.4MB
Sample260819-styq4axcja
SHA256 d9830213d3d73a30020a30bbc409efc55992cd8618ed305e87f0bc3e2a10a7f2
MD5 1b5ad07f1e0bce828f0c56e7eaef3abb
SHA1 e8606e982f29fda8bb1c028997060f7060b50ef7
SHA512 691ff48c737cb6ba4f1c59025753f1aae88f9e4c8153749810cd4da3062f41a7fff003625fc910825cb0c9fc99b793c5b5eeb5ce6c950b035c217187572634df
SSDEEP 98304:1s/h5FMqYD3f3UIC/Zo1pwIuWTYLP9Pk6gAK6n4ldyNh:1s5sJ3Uxo1yIEL1kehn4i
TLSH
T1B3A64A12B381C902C8B819B044164FE465B47E8D5F68E9A9B8C8773C67FA1CDB157BF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XWorm V6.5.exe

File Explorer

XWorm V6.5.exe

.exe 9.4MB

XWorm V6.5.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d9830213d3d73a30020a30bbc409efc55992cd8618ed305e87f0bc3e2a10a7f2
MD5 1b5ad07f1e0bce828f0c56e7eaef3abb
SHA1 e8606e982f29fda8bb1c028997060f7060b50ef7
SHA512 691ff48c737cb6ba4f1c59025753f1aae88f9e4c8153749810cd4da3062f41a7fff003625fc910825cb0c9fc99b793c5b5eeb5ce6c950b035c217187572634df
SSDEEP 98304:1s/h5FMqYD3f3UIC/Zo1pwIuWTYLP9Pk6gAK6n4ldyNh:1s5sJ3Uxo1yIEL1kehn4i
TLSH
T1B3A64A12B381C902C8B819B044164FE465B47E8D5F68E9A9B8C8773C67FA1CDB157BF2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9837666

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\byt3d4sh\Desktop\src 2\XWorm\obj\Debug\XWorm V6.5.pdb

XWorm V6.5.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

XWorm V6.5.exe

mscoree

dotnet