WilonityInstaller.zip
- SHA256 db45a3439da1d5eff85f1e7f4ea3cc9cf9e92c0d82985760b396db1395a54a40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Wilonity.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Wilonity.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target WilonityInstaller.zip
- Size 1.5MB
- Sample260623-t5rmlaev2s
- SHA256 db45a3439da1d5eff85f1e7f4ea3cc9cf9e92c0d82985760b396db1395a54a40
- MD5 cc0bcc2ade5d05b4393066f0ac21084e
- SHA1 c77fccca316f8ed79fd257e8fa14310531c83ef1
- SHA512 12fb5ef4d3349afe60de472d49f775c4d935b8c97ddda3270a2025512b4fffb739cc11f2df4b9627f84e8bf89367a9867dd49f2a80232570ade1d6bab73a3166
- SSDEEP 24576:f6OX1yUDkrATdNf+gdqTN/E8ICvIRxITXDpBH4uYi0ZDleSY6TrpOkHc2i/:fTa0TgNsdfgzD8uADleSYopNHc2k
- TLSH T1117533218489BF485780A62E4BB0F9742DEB4CC5D60EDB413BCA463F81C6687BD576BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Wilonity.exe
File Explorer
-
WilonityInstaller.zip.zip 1.5MB
-
Wilonity.exe.exe 2.9MB
Wilonity.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 6003df71ca846a71b1066d634a6e7deb2521f8e8d6fb419ef043928e0774ee31
- MD5 43f8cb735d3dc7a8a815dee63c5100bd
- SHA1 f0b6e819ab5fe473ce8247a8ab1e20c8954a594d
- SHA512 b05c8b8fde5903e940839be28ac5796286489c70b185b00f731542ca4cd03740980359c58915eb77129c677112cb570a7077cd3e449d7df9543fa3376055be49
- SSDEEP 49152:mB69c2oUtzoWyGWr47nD+Us+IyMiDXKQm1IpYVd:mB7qJWrCrW9f
- TLSH T1D2E5AE06BDD088EEC4AAA372857252853B74BC050F3517D32E50BB783E76AD0AD77B85
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f5:b1:d7:24:94:23:c3:4a:97:b9:81:73:99:22:7a:14:32:88:dd:2d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=gocodeit.online,O=LWfuotjv9wOOP,L=hjWKfi,ST=8H0414Lg,C=US
Chains
Jun 22, 2026
CN=gocodeit.online,O=LWfuotjv9wOOP,L=hjWKfi,ST=8H0414Lg,C=US
Subject
CN=gocodeit.online,O=LWfuotjv9wOOP,L=hjWKfi,ST=8H0414Lg,C=US
Serial Number
51:42:f4:c9:aa:b2:db:68
Issuer
CN=gocodeit.online,O=LWfuotjv9wOOP,L=hjWKfi,ST=8H0414Lg,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Jun 23, 2026 - Jun 23, 2027
Minor OS version
1
Major OS version
6
Entry point
471904
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
898KB
Virtual Size
897KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
53KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
108KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ