24012024_0914_wikldr_fix3[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24012024_0914_wikldr_fix3.bin
Size

113KB
MD5

9063da968dc118cfb6e2a9230ca3172c
SHA1

3f739d0d613a55e6ad551ef5d21b9634f0d08c61
SHA256

fe6d6ae068fa9f3f722341cd723f6018da9c2886acb9d1211c066a314ee21e07
SHA512

5000ce6265b3c20db607df8450373c17062a80549775ee93b4221b2ae6ec7fa7c8f6cf6bec370f4664cfed49277c9c2ced81d222dff10dc43f176545258b5592
SSDEEP

3072:oOJ96NRSXBcj20ypspC3DMFL6pDrJQrBMfL7P8t:oxSxcj2HsmMApDrJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24012024_0914_wikldr_fix3.bin

Files

24012024_0914_wikldr_fix3.bin
.exe windows:5 windows x64 arch:x64

Password: infected

b547b1487151c8557bcbc6c24574ec6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ExitProcess
VirtualAlloc

Sections

.text
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE