Static task
static1
Behavioral task
behavioral1
Sample
Wallet.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Wallet.exe
Resource
win10v2004-20231215-en
General
-
Target
Wallet.exe
-
Size
460KB
-
MD5
33e20d17d1ac19b0491fa9d71fb30296
-
SHA1
41b4631a0d5a33598f4ae3c9726709d658116570
-
SHA256
4029b7967eac8e5c7e441915fbe24552b56bb52b044ccd447a1ade6db574d7c2
-
SHA512
f19146181a2c59c2204f9931a3c979827ccdd3a4ba59880cbde4e5206311c63a9af681931c0039c3216d2398e1591d94803e538f784e0f9910cc589437800603
-
SSDEEP
6144:KETbLiOeeI26BKN/jXY2SwAyvNv8b/HV/AtbwGqwFp5JJDz87KVXTnyJYNDKT:ZHGtEaKNLZurV0bwGqwTGKVGCNG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Wallet.exe
Files
-
Wallet.exe.exe windows:5 windows x86 arch:x86
c52f363ae887f7e2b622bb07b5377eee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
FillConsoleOutputCharacterA
GetConsoleAliasesLengthW
FindResourceW
InterlockedDecrement
FindCloseChangeNotification
MoveFileWithProgressA
GetTickCount
VirtualFree
GetConsoleAliasesLengthA
ReadConsoleW
LoadLibraryW
FreeConsole
GetModuleFileNameW
SetComputerNameExW
GetStartupInfoW
CreateJobObjectA
GetLastError
SetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
LoadLibraryA
WriteConsoleA
InterlockedExchangeAdd
LocalAlloc
MoveFileA
FindFirstVolumeMountPointW
RemoveDirectoryW
QueryDosDeviceW
GlobalFindAtomW
GetModuleHandleA
PurgeComm
GetFileAttributesExW
SetCalendarInfoA
GetCurrentProcessId
DebugBreak
DeleteFileA
MultiByteToWideChar
GetModuleHandleW
Sleep
ExitProcess
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
CloseHandle
EnterCriticalSection
LeaveCriticalSection
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
HeapSize
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CreateFileA
Sections
.text Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ