Overview
overview
1Static
static
demos/afte...lo.xml
windows7-x64
1demos/afte...lo.xml
windows10-2004-x64
1demos/afte...ld.exe
windows7-x64
1demos/afte...ld.exe
windows10-2004-x64
1demos/befo...lo.xml
windows7-x64
1demos/befo...lo.xml
windows10-2004-x64
1demos/befo...ld.exe
windows7-x64
1demos/befo...ld.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
demos/after/hello/hello.xml
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
demos/after/hello/hello.xml
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
demos/before/hello/hello.xml
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
demos/before/hello/hello.xml
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20221111-en
General
-
Target
af27d2b30f12604b2112519382ea1d537950c5c176766aa9aa6eadba3bd8b3b9
-
Size
833KB
-
MD5
e1c167eabdaeb33425fb4f9c0de90550
-
SHA1
25857693b4568335c553fc9f9a4dbef8b11e0226
-
SHA256
af27d2b30f12604b2112519382ea1d537950c5c176766aa9aa6eadba3bd8b3b9
-
SHA512
c6f7284e127a5126ffe4b9f8105deeb456124a637fe80a0aebb9983bfd7840c158a107690f03236e3ff311e6e3ca81d1403c4a795fe9058e4cc2fde464146915
-
SSDEEP
12288:A81uLEixWG7X9pasvTmPkZON2M1JTsdbIGQhE37amJq/BIwzhKGV15DVTn:qTxWGhS8ZOzf723emE5PF3VT
Malware Config
Signatures
Files
-
af27d2b30f12604b2112519382ea1d537950c5c176766aa9aa6eadba3bd8b3b9.zip
-
demos/after/hello/.idea/.name
-
demos/after/hello/.idea/ant.xml.xml
-
demos/after/hello/.idea/compiler.xml.xml
-
demos/after/hello/.idea/copyright/profiles_settings.xml
-
demos/after/hello/.idea/encodings.xml.xml
-
demos/after/hello/.idea/misc.xml.xml
-
demos/after/hello/.idea/modules.xml.xml
-
demos/after/hello/.idea/scopes/scope_settings.xml
-
demos/after/hello/.idea/uiDesigner.xml.xml
-
demos/after/hello/.idea/vcs.xml.xml
-
demos/after/hello/.idea/workspace.xml.xml
-
demos/after/hello/hello.iml.xml
-
demos/after/hello/out/production/hello/go-bins/greeting.8
-
demos/after/hello/out/production/hello/go-bins/greeting.a
-
demos/after/hello/out/production/hello/go-bins/helloworld.8
-
demos/after/hello/out/production/hello/go-bins/helloworld.exe.exe windows x86
deb82cc024c128a3bc2e3f40abef1ce5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
timeBeginPeriod
kernel32
VirtualAlloc
VirtualFree
CloseHandle
CreateEventA
CreateThread
CreateWaitableTimerA
DuplicateHandle
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
LoadLibraryW
ResumeThread
SetConsoleCtrlHandler
SetEvent
SetThreadPriority
SetWaitableTimer
Sleep
SuspendThread
WaitForSingleObject
WriteFile
Sections
.text Size: 869KB - Virtual size: 868KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 204B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/18 Size: 60KB - Virtual size: 59KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/30 Size: 37KB - Virtual size: 36KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/43 Size: 142KB - Virtual size: 141KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 47KB - Virtual size: 47KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/71 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/87 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/102 Size: 512B - Virtual size: 91B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 193B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
demos/after/hello/src/greeting/greeting.go
-
demos/after/hello/src/helloworld.go
-
demos/before/hello/.idea/.name
-
demos/before/hello/.idea/ant.xml.xml
-
demos/before/hello/.idea/compiler.xml.xml
-
demos/before/hello/.idea/copyright/profiles_settings.xml
-
demos/before/hello/.idea/encodings.xml.xml
-
demos/before/hello/.idea/misc.xml.xml
-
demos/before/hello/.idea/modules.xml.xml
-
demos/before/hello/.idea/scopes/scope_settings.xml
-
demos/before/hello/.idea/uiDesigner.xml.xml
-
demos/before/hello/.idea/vcs.xml.xml
-
demos/before/hello/.idea/workspace.xml.xml
-
demos/before/hello/hello.iml.xml
-
demos/before/hello/out/production/hello/go-bins/greeting.8
-
demos/before/hello/out/production/hello/go-bins/greeting.a
-
demos/before/hello/out/production/hello/go-bins/helloworld.8
-
demos/before/hello/out/production/hello/go-bins/helloworld.exe.exe windows x86
deb82cc024c128a3bc2e3f40abef1ce5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
timeBeginPeriod
kernel32
VirtualAlloc
VirtualFree
CloseHandle
CreateEventA
CreateThread
CreateWaitableTimerA
DuplicateHandle
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
LoadLibraryW
ResumeThread
SetConsoleCtrlHandler
SetEvent
SetThreadPriority
SetWaitableTimer
Sleep
SuspendThread
WaitForSingleObject
WriteFile
Sections
.text Size: 866KB - Virtual size: 866KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 204B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/18 Size: 60KB - Virtual size: 59KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/30 Size: 37KB - Virtual size: 36KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/43 Size: 141KB - Virtual size: 140KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 47KB - Virtual size: 47KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/71 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/87 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/102 Size: 512B - Virtual size: 91B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 193B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
demos/before/hello/src/greeting/greeting.go
-
demos/before/hello/src/helloworld.go