netwalker | 55cdf7ea2da073657b79bed6ac128f61c20519a41715b1675c509face60fb9bb | Triage

Sharing

General

Target

55cdf7ea2da073657b79bed6ac128f61c20519a41715b1675c509face60fb9bb
Size

69KB
MD5

a2de690489ee5d8b3cd06fdea0a63670
SHA1

5f94ad2d365ae9c233b3f9ef68470c03e45aba64
SHA256

55cdf7ea2da073657b79bed6ac128f61c20519a41715b1675c509face60fb9bb
SHA512

0fb16a63055cc5cd13464ce3d414f7efe8c41abe4da98614629d2af2116ea9f2742edaaf7ca77ef33a26b8e0552e9bc149edbec7029b87c24fb77cd2d674a476
SSDEEP

1536:YuCWRxL7hbUiQfovePbUU+hhOZuIWiFp+ZfaBZebC33O+7hi5UcQ:TCWf7VJQfmePbvkhOZu1iFBBZebC31iW

Score

10^/10

netwalker

Malware Config

Signatures

Detected Netwalker Ransomware 1 IoCs

Detected unpacked Netwalker executable.

resource	yara_rule
sample	netwalker_ransomware

Netwalker family
netwalker

Files

55cdf7ea2da073657b79bed6ac128f61c20519a41715b1675c509face60fb9bb
.exe windows x86

e82dd51b077167be63c004bed23d0c1e

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ