BigWalk_Trainer_v1.0.zip
- SHA256 7dd327155e16f834090df6d3d311f6cf47c95cd7535848c9796d6cd61b01f114
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BigWalk_Trainer_v1.0/BigWalk_Trainer.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
300 seconds
General
- Target BigWalk_Trainer_v1.0.zip
- Size 16.2MB
- Sample260808-pr9tssfl6s
- SHA256 7dd327155e16f834090df6d3d311f6cf47c95cd7535848c9796d6cd61b01f114
- MD5 74185ef4a1b7dcca0bb33a27e371529b
- SHA1 edb85d68d490aa27c0b14825866c9b99db317b14
- SHA512 ec7b5f7e4b4541747b8de42f3577a00c73ffac849bc0cbb317701c972214620318f4429f1e1163a43993c40a47e2e322a91035ee1616d190054d52d0066aeee1
- SSDEEP 393216:Gs8bkg1XFSYFObmAdPe/vgmpF1ZqbZlAOmXNZoxqz5VdUcBo/:GFbv4YIbfU9pFMZUHoAzDdLo/
- TLSH T13F0733C0BE5B4501CCB41ADA890EE06B376962F7438FD05E0B6CE55F855EA1C98F4F2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/BigWalk_Trainer_v1.0/BigWalk_Trainer.exe
File Explorer
-
BigWalk_Trainer_v1.0.zip.zip 16.2MB
-
BigWalk_Trainer_v1.0/BigWalk_Trainer.exe.exe 18.4MB
-
BigWalk_Trainer_v1.0/CHANGELOG.txt1KB
-
BigWalk_Trainer_v1.0/README.txt3KB
-
BigWalk_Trainer_v1.0/docs/HOTKEYS.txt941B
-
BigWalk_Trainer_v1.0/profiles/profiles.json1KB
BigWalk_Trainer_v1.0/BigWalk_Trainer.exe
- IMPHASH f977e644fd03b8728eb45d226d0d26b6
- SHA256 a4dffd34c3a26a6c54f5af1e76912d7f7ec1c67367738598bb6106878c039c0f
- MD5 1d5934db27e6f0612cd7c76981d420ad
- SHA1 5c9e78ff3876a7f4b6ea00f31fe93735295af4f2
- SHA512 adb446848be55535772dd108381bf69702760fd36db55acdf0624a7e0a7188a48d07787f55eaae336c8ea616c80aa9d442153c561152acd289885b7714f85c9d
- SSDEEP 196608:FZZLZQk46Fch6/tth4l5YoeG8qBwPa/BxmBbwyt6BE7KObh6GapoNGNlL9bdxR/4:V7catth4YbiB6YBxmBbqu1bOR0fUQYG
- TLSH T11E1723C7A9DEE29CC0835F0065C613CB25D571CE86ED851E35CF6C03B521DAA8AC9A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0a:33:9a:c6:53:7d:64:3d:52:34:be:e3:ab:f4:34:84:b5:72:ae:75:8a:49:bb:33:a7:15:6b:a1:71:e7:9e:2f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Color File Editor,O=RockBrook Technologies Ltd.,L=Salt Lake City,ST=UT,C=US
Chains
Aug 5, 2026
CN=Color File Editor,O=RockBrook Technologies Ltd.,L=Salt Lake City,ST=UT,C=US
PE Signature issue
Digest
5b:c3:fb:7e:60:df:57:5e:99:5b:41:09:1f:da:91:85:f6:37:51:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Color File Editor,O=RockBrook Technologies Ltd.,L=Salt Lake City,ST=UT,C=US
Chains
Aug 5, 2026
CN=Color File Editor,O=RockBrook Technologies Ltd.,L=Salt Lake City,ST=UT,C=US
Subject
CN=Color File Editor,O=RockBrook Technologies Ltd.,L=Salt Lake City,ST=UT,C=US
Serial Number
7c:88:37:b7:00:97:41:91:42:6a:34:87:c2:3a:a4:39
Issuer
CN=Color File Editor,O=RockBrook Technologies Ltd.,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 5, 2026 - Aug 5, 2029
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 18, 2025 - Nov 12, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
6
Entry point
14270114
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetProcessHeap
user32
PostQuitMessage
gdi32
CreateSolidBrush
Name
.text
Size
Virtual Size
257KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.6dk
Size
Virtual Size
11.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.=:{
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.nWH
Size
18.4MB
Virtual Size
18.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
BigWalk_Trainer_v1.0/CHANGELOG.txt
- SHA256 802bdfaac10a2dbad062afa55bbb57b8f96d501454e3319918e5acda5fff52d6
- MD5 55db5b7a7a910eed6e05dee910580149
- SHA1 905cec0e0f48773c9b1d0fb0a0a0e40848791aa2
- SHA512 232e6651f329bcf16621a4c6f8d3bc433840dfdd564b8ae093309256f47b4ee2f0a34d55f622d6e7acf8d704ababfbf62b828bdabbd5acb8400471b8276606dc
- TLSH T113310EB35E2A15253132D36F084255416FBAF641FF34655538AB709CFBCE33992A0E70
- MD5 SHA1 SHA512 TLSH
BigWalk_Trainer_v1.0/README.txt
- SHA256 d0622d5c9fa3d5f8c551fd61b8a511cd846668f388bac04bfb3f8f11aa10a42c
- MD5 cc3ca9af928f064ede00d86f9da2d87c
- SHA1 c989232638900cdb41bff4bb2a550d40d2ac44c7
- SHA512 4786d6dfe0a5a1de250d051d1ab4e23967263203f2af11bfbdee805faef61d6b5c9ec16877bae70541a839c414773791c5c27250f02119816d1aff353bc6b188
- TLSH T17271203D661AB6197373114F18822280F513B441E77561933CE8B0A8EC35F5EC7B4B68
- MD5 SHA1 SHA512 TLSH
BigWalk_Trainer_v1.0/docs/HOTKEYS.txt
- SHA256 2d4a1ee9ffd128f4333ec71c9aeb333478b3a38a3f2664d62513a0123f6fee68
- MD5 bad89703772f1b12137ca820715d479d
- SHA1 50b14c1886c967709abf1e4026fd91f75cc57019
- SHA512 6fb98df670815b21f2bdaf5bfdd8bd0d738a52300cdcb407e673d15f279b19c46a333eeec8fbd7c50263f04045816a01c2cd264a00abc11989f35f938055f39b
- TLSH T16711F7A6CE465045AB3FDE5D0C44F674EEB25F898426414630EC7598C32AFA4D4742AE
- MD5 SHA1 SHA512 TLSH
BigWalk_Trainer_v1.0/profiles/profiles.json
- SHA256 b65569587daac63edf747d3d6f1e2647ae39b24404f984c1ea4cc00fc708080c
- MD5 a99a8b893027bb8fb78c67f3404b5cc8
- SHA1 e12799b5599185613fa57c678b7014831e5fb2fb
- SHA512 b444ae6c89d9e854262e0f07e54f8d190b1fb9a39ba562c8d6b0b895e8739947d418d7d46c795eccbaab18c5697304abf0b16ce4fc86c5470b87b2122faa6a21
- TLSH T1B3312F25D8262DFE00B5662DD86AC253D32083A37A251C43F5FC820C7F73A3574A6EC9
- MD5 SHA1 SHA512 TLSH