2024-04-09_f5271429eecc9239a57bb608ae642def_wormlocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-09_f5271429eecc9239a57bb608ae642def_wormlocker
Size

193KB
MD5

f5271429eecc9239a57bb608ae642def
SHA1

c13e964284143929ab9a53463cfcec6ed48c08d5
SHA256

7c2cbcd2444c507324de85411975ee3276341c004a96494d4785a8f89c3ef767
SHA512

317f89201ec64c316f858a194db5e149cf2a1a923d7e2fcb6ab75c4206f1b08e298005e4066d36da5184ff1db3e6dffc749927d97871c575d021333be7687163
SSDEEP

3072:ZHqcu7cIA5SvNghM98+pQ0Hd00m5OTOqxpd9iX3/oeatRf4C9zo+dNEdoOoZqY:H2v+G+Qd00mEOqxpd9i/nmff5q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-09_f5271429eecc9239a57bb608ae642def_wormlocker

Files

2024-04-09_f5271429eecc9239a57bb608ae642def_wormlocker
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Biostar\Desktop\WormLocker2.0\WormLocker2.0\obj\Debug\WormLocker2.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ