Process List Fucked By WALKER[.]exe | Triage

Sharing

General

Target

Process List Fucked By WALKER.exe
Size

2.6MB
MD5

65bdb899bc0449cba7cbc7afdfff4633
SHA1

117b0829650763b3d4551a849c9be0c914dde76f
SHA256

bb209ebe4cf6428ee4c47d102b07107c17ab2b510c5a930c35e8952eaa7daddd
SHA512

62ee2e4195c21b8816978d1210d9e55064cb0c91270ed078e728d7ce3f8476b0166c17ca415ec674144a7b7a23a7149a49af0f0f68cac238df5cddb73341eae1
SSDEEP

24576:40g4wp7wwFpvZmESSRjoYKaQgJe6uZqWhsiikr0OpOnfvz70O4JEdi0O+UEdaAPn:zgF7rF5ZeSNKa1Jai88nflE97zVitq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Process List Fucked By WALKER.exe

Files

Process List Fucked By WALKER.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Sithum Vihanga\Downloads\HeshaN ModZ Premium\HeshaN ModZ Premium\HeshaN ModZ Premium\Process List Fucked By WALKER.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ