XWorm V3[.]1[.]exe

General

Target
XWorm V3.1.exe
Size 7.0MB
Sample260930-b9y85ats2m
SHA256 f40b8ef92f828123c81a8b275ab0e29e44b44b3a175e452eea72a475f6cfaf80
MD5 b7a300c6953f42f199c2ff903feac72f
SHA1 8f7d38270d33ae7f1b1fa49cd03ecfc63576a8b8
SHA512 80ef310b54e8c54b80649651acb58c07251bdcf1cde9ead0b85123fee2922e40958a78cc029bb28a69c8ea993952c4cf973b4448b9d24580c535a7460dfbca47
SSDEEP 196608:JLQ6B/XKUDz9NoUXJzUWi7MYjBVvo5/UV:FFlaU/9NZXJZinjB9oxg
TLSH
T15576E010A6245901E05FBB36C3CBC6B462F68CB31722F90959E9AEA736156C36E173C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XWorm V3.1.exe

File Explorer

XWorm V3.1.exe

.exe 7.0MB

XWorm V3.1.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f40b8ef92f828123c81a8b275ab0e29e44b44b3a175e452eea72a475f6cfaf80
MD5 b7a300c6953f42f199c2ff903feac72f
SHA1 8f7d38270d33ae7f1b1fa49cd03ecfc63576a8b8
SHA512 80ef310b54e8c54b80649651acb58c07251bdcf1cde9ead0b85123fee2922e40958a78cc029bb28a69c8ea993952c4cf973b4448b9d24580c535a7460dfbca47
SSDEEP 196608:JLQ6B/XKUDz9NoUXJzUWi7MYjBVvo5/UV:FFlaU/9NZXJZinjB9oxg
TLSH
T15576E010A6245901E05FBB36C3CBC6B462F68CB31722F90959E9AEA736156C36E173C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

2345

Minor OS version

0

Major OS version

4

Entry point

7285134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

XWorm V3.1.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

XWorm V3.1.exe

mscoree

dotnet