Overview
overview
3Static
static
3materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1demos/afte...ld.exe
windows7-x64
1demos/afte...ld.exe
windows10-2004-x64
1demos/befo...ld.exe
windows7-x64
1demos/befo...ld.exe
windows10-2004-x64
1materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1demos/afte...ld.exe
windows7-x64
1demos/afte...ld.exe
windows10-2004-x64
3materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1demos/afte...ld.exe
windows7-x64
1demos/afte...ld.exe
windows10-2004-x64
3demos/afte...rld.js
windows7-x64
3demos/afte...rld.js
windows10-2004-x64
3demos/befo...ld.exe
windows7-x64
1demos/befo...ld.exe
windows10-2004-x64
3materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1demos/afte...ld.exe
windows7-x64
1demos/afte...ld.exe
windows10-2004-x64
3demos/afte...rld.js
windows7-x64
3demos/afte...rld.js
windows10-2004-x64
3demos/befo...ld.exe
windows7-x64
1demos/befo...ld.exe
windows10-2004-x64
3demos/befo...rld.js
windows7-x64
3demos/befo...rld.js
windows10-2004-x64
3materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
15/06/2024, 06:13
Behavioral task
behavioral1
Sample
materials/1-go-m1-overview-slides.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
materials/1-go-m1-overview-slides.pdf
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
materials/10-go-m10-concurrency-slides.pdf
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
materials/10-go-m10-concurrency-slides.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
materials/2-go-m2-development-slides.pdf
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
materials/2-go-m2-development-slides.pdf
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
demos/after/hello/src/helloworld.js
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
demos/after/hello/src/helloworld.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
materials/3-go-m3-variables-slides.pdf
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
materials/3-go-m3-variables-slides.pdf
Resource
win10v2004-20240611-en
Behavioral task
behavioral21
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240611-en
Behavioral task
behavioral22
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
demos/after/hello/src/helloworld.js
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
demos/after/hello/src/helloworld.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
demos/before/hello/src/helloworld.js
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
demos/before/hello/src/helloworld.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
materials/4-go-m4-functions-slides.pdf
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
materials/4-go-m4-functions-slides.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
materials/5-go-m5-branching-slides.pdf
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
materials/5-go-m5-branching-slides.pdf
Resource
win10v2004-20240611-en
General
-
Target
demos/after/hello/out/production/hello/go-bins/helloworld.exe
-
Size
946KB
-
MD5
e5203351b5965943fab9c5f84358ed80
-
SHA1
e94266b922afd8d993730e2e2bd4648ca283aff2
-
SHA256
8fbb890da716b93613e273dc4f2088ca3086c4b1c770dd8d13153c210e1e7798
-
SHA512
c8a84c6416af31c71bafa5e4f83a72885f11d4d588d8c1f46781bfd86b263d2cedd11893c565555cfb47e71ed094081737d1aa5d9fbe60cda5bcff075c1fa704
-
SSDEEP
24576:Y3ZZlFS0LRGVKfnlMCe8HcVGXtRhK355ffnHuGUSkC3oyi5muzOb2Doqw8:IS0LwVkgOGUSkC3oyi5m5
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4768 936 WerFault.exe 83 1920 936 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\demos\after\hello\out\production\hello\go-bins\helloworld.exe"C:\Users\Admin\AppData\Local\Temp\demos\after\hello\out\production\hello\go-bins\helloworld.exe"1⤵PID:936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 936 -s 4162⤵
- Program crash
PID:4768
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 936 -s 4242⤵
- Program crash
PID:1920
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 936 -ip 9361⤵PID:4784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 936 -ip 9361⤵PID:4780