Dark Wolf[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dark Wolf.zip
Size

3.8MB
MD5

4cbf14faeb230d7a99065bb16aa71465
SHA1

0dc4e9dec78404a62c363202b2ff90bcf42ac914
SHA256

23eb5f7c0ccce14fe7afb72da0e04d07f565335295384a65fd80ae577cda6162
SHA512

2111d3587f4b37cf9bf8322da3f956c7169e9ff804f3b7788543f5f750c4668abf3f2e9075e815c9150e68a7341b8930942f7e22ed6e929720350d08fada5363
SSDEEP

98304:lOWEPpkSRCjjCQKLaR8BCIptXel5IW+gP+b3eY/F9NLKo6fQhK:2uzoaR8BCIzZWPmbJdLKo6t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Dark Wolf/Dark Wolf.exe

Files

Dark Wolf.zip
.zip
Dark Wolf/Dark Wolf.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ