A:\Srcs\! yes\33\2\Wonder L\obj\x64\Release\1 Hit 1 Wonder.pdb
Overview
overview
7Static
static
3Wonder.zip
windows10-1703-x64
1Wonder.zip
windows10-2004-x64
1Wonder.zip
windows11-21h2-x64
1Wonder/1 H...er.exe
windows10-1703-x64
7Wonder/1 H...er.exe
windows10-2004-x64
6Wonder/1 H...er.exe
windows11-21h2-x64
6Wonder/Bun....3.dll
windows10-1703-x64
1Wonder/Bun....3.dll
windows10-2004-x64
1Wonder/Bun....3.dll
windows11-21h2-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Wonder.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Wonder.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Wonder.zip
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
Wonder/1 Hit 1 Wonder.exe
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
Wonder/1 Hit 1 Wonder.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
Wonder/1 Hit 1 Wonder.exe
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
Wonder/Bunifu_UI_v1.5.3.dll
Resource
win10-20240611-en
Behavioral task
behavioral8
Sample
Wonder/Bunifu_UI_v1.5.3.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Wonder/Bunifu_UI_v1.5.3.dll
Resource
win11-20240802-en
General
-
Target
Wonder.zip
-
Size
13.3MB
-
MD5
121c6a5cec6fc5bcf7d8cebe9209f0a8
-
SHA1
3800a8e4ebf5ef97f5b86ce8705d75d5cdf5ba9c
-
SHA256
dcfd8b076cd8aab64b9f4f2c7f9bfe992450e24a911d45ad401aff2d5cefc160
-
SHA512
002c9b9d2cdda3738442ed5869ee13eb4c5ae81f76d290cab0d20e4d4debf30a2fd4ec4c05a6b23233094a232a8b73ee2a55ccbd734c66e8cb9817bb84d3e6f6
-
SSDEEP
393216:bxljf3542T4S8qY9aUFt7ZoxChn/T7ygYOMRJ:f3ihoYfZoJ
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Wonder/1 Hit 1 Wonder.exe unpack001/Wonder/Bunifu_UI_v1.5.3.dll
Files
-
Wonder.zip.zip
-
Wonder/1 Hit 1 Wonder.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Wonder/Bunifu_UI_v1.5.3.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Wonder/𝙋𝙖𝙨𝙩 𝙡𝙞𝙫𝙚𝙨 (𝙨𝙡𝙤𝙬𝙚𝙙 𝙧𝙚𝙫𝙚𝙧𝙗).mp4