Static task
static1
Behavioral task
behavioral1
Sample
wave-server.zip
Resource
win11-20240802-en
General
-
Target
wave-server.zip
-
Size
8.1MB
-
MD5
0707aa0d439576814677b3fcadf6f0b2
-
SHA1
c6258cbc256b0a920725ddb7820d45bb0c701b21
-
SHA256
5aa7b60b58e018659f501d46ff16272df0e01cd0274fdf02c987b944cfe8d49e
-
SHA512
10f13079fd25f78ea1b8e20fee32908f6ea587404b219240ca9255fe25227bc205820a3f443694077252952a60fac79e759c9f97eab317edee87e0366f13ccae
-
SSDEEP
196608:IXsge0rgIWS9n5z/TLKxGgfqjF1lwlEmD8wu+YABciN3mD:IXsgHgIWSVZLKxGg2TeEmD8IcYC
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/assets/WaveBootstrapper.exe unpack001/assets/WaveWindows.exe
Files
-
wave-server.zip.zip
-
assets/WaveBootstrapper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 742KB - Virtual size: 742KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
assets/WaveWindows.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7.8MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
cmd/main.go
-
go.mod
-
go.sum
-
internal/routes/api/auth.go
-
internal/routes/api/login.go
-
internal/routes/api/user.go
-
internal/routes/filestore/filestore.go
-
pkg/logging/logging.go