2024-09-14_7d0dcf37e8623847285e023153ae909e_wormlocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-14_7d0dcf37e8623847285e023153ae909e_wormlocker
Size

1.6MB
MD5

7d0dcf37e8623847285e023153ae909e
SHA1

144029d214e8f5ca374351a1fd538a6d40c4876d
SHA256

89e30bbeccae1de5c4de677442a44fa3c2c7c7db1a4fc0510d9c343133cc43df
SHA512

6ba9319a28c57e63eca420b54941eea371380cef0455c4d6c5524d62861f510e1ad477b533c96ed27b70fa695920b3fba1ceca7831555f46f2b05f52b44a59ca
SSDEEP

49152:Mb/gUlz7chwGu8RXWxfLfVYY0Us9diyRXXVqPUqa:Mb4UShwG4xzfVhNsbtFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-14_7d0dcf37e8623847285e023153ae909e_wormlocker

Files

2024-09-14_7d0dcf37e8623847285e023153ae909e_wormlocker
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\damia_de0etcp\Desktop\MainRansome\obj\Debug\ゴーストロック.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ