ڂ�!8�Ћ�_�X�,w��M:�� .�e~������l����_*��W� �YZ� �{�OC7���V�O���x�N=;D�^�l�֙�N��5m97���g����l��O�m�9��%������{i�Q *�'Bl6qL�R��[N7X�0�s:��=�.`���T��̕�rO�j����{S'Q�~����E,�QI�so�Y.���>S9��J]��S+X²h5+� b��f�S��i���;Z8����6���胠�;l��r0���A՜�U�r/�N���n�;1+� "�0�\*�-�z��˪O���q(�}R��M��N���7W�7ʑS'��v�U�|c�d5�;κ}1�D�zn2�\��q� El6�S6��δ�d-����#2m���U�y(�ywA��b�\��(�����D���Ul���IM���ˬt��H�[��\,`���xA�sv(� ��x5��1��}��p9�� �_�3uS����0)$���c�t�Q�vI2�0�p�?$��Z;�T��W�.}��J�����u�@���d��S�s ,˘��2Hķ���v4ˉ��ށs�bA]� �_��9oO��� �b�������Tk3�M����P.��3L�����0M�H�1��|��=a�j��@Y�%����L�iDjIS��<��� }wP'��86O[�Szi|�p�����@����0/Ԛ3����/��@�Q{���j� ��̴�L��!�}��*�O��V�)��l��k��z�{J'�;�=��B�Wn���1��լ��ԍ#_�|�������{�<��H�>��r�Wg����\��Au�W��aH.lBU��P`>�:�J��P�Ƭ:���͏����%%���kI����:������qJx�/�f����A2 �I:Ԩ��f��I3#�6�"��ؿ������ �� �o�#L�!�8[(�{>}�b@�Tt��#��"�f�v(�p_�N��z���gⵤ'O�n�v'���Ϯ�x6q�`U��)�{�BR�<)f���{/;��S�.�|~� z�vcd�Y�l5]rVI��� A����6 b��8}�� ���#`�x&�����Y���6�X�B��D=�B0��������c$M=�p� ./a-:��$2�����ؽz�ei=�㛕D@۬2��=��:qu��{F҇CrZhPk͆��b���Aۧ�)�B D�W�v-ާM���Rm�D�)���`C���\����$��Ef��z{����/��zr1a���E���&����<q�}�K�4"�k�V�M���#�J<�ו%��P��~1�{�>+ܸ�����-����T��^Yo������G\�S9I��Q�Ko(��/�/*9xd#j6��~X��08�j~�"~+T ���h��:x߾E�Y)!�L�*�.�~-γ�+�rr?hC8�i�<E3�㟙�C�5�L�#�.K�ҸP�r����tb�KQ,��鍙�Se�(�Fh����&-�����m�������Tj�t����s����J�z�.��y���J:BǓ�{�1�M��O ��9�|��=_d�O˾'�0�K9N��3uZc��s ��7%����o��PhdI(p�� ?���ͷH��۰�K�� ���j�4�YU<�m��H�];_���#}й`����d�����g��O��Xz9�� �y#��`���/�'�3W�%P���ϒNN�;�%*��0 0���kg�4� �����{��T?n�Ɠ��棵Q�����7�&��7�(U����n.�{�w~���;�l�3:�A9�����G�=�x4������92jl0��Q;����J8ruW��D��!Gg�X��ޕ@������R7U�TA� �S8uj���9���"0Fڒm�v8�O����Q����=���m��IԥVM|���ހÝ��<�� @��8��9q�(:j�U��6� ^��Ģn�L?��H�?U Y� �]=$7�|��jø�e�,�#kq��_O��c�9ָQ�ޮ�O����1��lri�VX~ #���Hk�t��#��l��I�=s-�Q�Xl_JY�%Q����.�H�i@��C$��]5��y�@2�Z��{��F7��E+��@�c���օ)��Ӌ���+��u�����>D�_!�K'� @�r�"]�M�m�j�@����k�pEP?|�Gm�����9kL��X��I�TZ��)�A�t`�p���Z�%�-�{��BUsT���G�q C���4�B ���`!�Jcf��o�'�\���= �f��B���O�#N�AY�Ĭ�ID�.��"�Q�Ǽ^5|�Xf^��&�/��KB%"������I�v�Y'��/�"�x�6���)~#/�}/x���覝i�!!�FG�iJ{J�gCY���s��3�ubi��A�����x ���E���g�8-�� т�7\�-��"���l��_�Ԫ�c~v�~r�jU��~�G�ov�j~tf">$m�?A��9vӷ�1x=r:@�m$��L3co'�ח^O�g���ݚ�>]�� �܆ ɻJ \#��y�ٝ� cNE�,Hx�K�m������Qkm��R�>��>�g���&p�R ���'� ���q:���#S��^��Z��d�]'��Lnш轆&���O�hz���#��ˀ��OX'��A��4�v/ ���Q�6w��˯+q.@s8Et�+Mi����^G�����)����f����UOo�09+bl@��T�/lR��,��<G �m�1i'���.�<ߴs�֫lh�/Q��I)YSv�U�@=2����4����)�oU�7�.%��+ ��i��|j怈��Q�(l���{�H\s8t���Lz!��r�I����cR��'w��c��U�7�]��>����}�)�&�����D��]���9����.�#��!����KM�xJ&�MψȬ@�s�咝���X�Hr��.�Ӂ'���A+�>>�gɌ��HP&;B�"�Z!y�c�Dյ=�>�樇@R�:�����E3�*M9���g�|aL��[��تdl������� �2��29��B��8<Wc�X��UOHB@v�H���{������SZx"��K��S�q*���_�Ж����yA�e�,�~�գAS��tt�%�Cglp�"����E/�Am9c|�� ����p|&��#�6��.��Р/��l���/h8e�m���W[��ϋʄ���W�S�<�������(.h��]9�ػ c{!F�����D����eN�����݇��8*�@�dH�ݏ���,i��Ư��O�PsQ��[a��z���R���O�cw���kESYd\ L�w~ �V�7�5��OLѫ�A� v�l��xˮ�����wn�j:2^$(�Fxa�?5��=ιՁ��לşP]�C���� �_�<8����]�=� ��o�zEET�b��ZJ ʄ�&��'��?�(���`!_ ��[��y�I*���eI�c��� �w�yB2�ZG��{�/}*�wF��\��E��K$ <��D�jDL`�����굳��*%O�-�x��}����T�W��c��@QTo�����e<$2.A����Ep�$H.���7��9��S�3VO�4�r P����y�E����^[vk�}`�Z Q��fk<��H�D$�,��������KM�G��Y�P�O�E����뤍Dv;7n�j,}T��@r����4m�9� ���T+:s�r�7���B�W<جKX@� �ఞ��y�j�m/W
Static task
static1
Behavioral task
behavioral1
Sample
WingMan XSS Vulnerability Scanner Advanced.exe
Resource
win10-20240404-en
General
-
Target
WingMan XSS Vulnerability Scanner Advanced.exe
-
Size
8.6MB
-
MD5
fd4a94d55a67112fb92ff5ad40722be7
-
SHA1
00e15515727a44d5e5dac86667bc31ffd617afae
-
SHA256
4515339ca46d7bece5da22fd17206b159a277c561a1c9f23d3e4ec8d9576e430
-
SHA512
71444faaf86332b5cd7db87b5d159e654e797f18067d2a9f487085e122fb27a7ee8606ea31fe0dd876e975452c908f30157b3d1851b0a254ad41a8283478d6f3
-
SSDEEP
196608:SygbRGMPBOEHwki141ivJHzVm8JuV/jJMOqN3RcMKVLAWQRTy/1yVmmLdM1+:S5FGMPBOIW141sJMIuRSN3G5UgI4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WingMan XSS Vulnerability Scanner Advanced.exe
Files
-
WingMan XSS Vulnerability Scanner Advanced.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 1.7MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.9MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 128KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE