Resubmissions

09/10/2026, 12:37

261009-ptrq1aex4p

09/10/2026, 12:32

261009-pqvy9aew9l4

General

  • Target
    Wabbajack.exe
  • Size 121.3MB
  • Sample261009-ptrq1aex4p
  • SHA256 0728c2d4c199cd71aa7bb59a78f65d796de3727dc2896b47a0872bb54665f00d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Wabbajack.exe
    .exe 121.3MB

Wabbajack.exe

  • IMPHASH 8a34d2e5912e3d13caec44729685a874
  • SHA256 0728c2d4c199cd71aa7bb59a78f65d796de3727dc2896b47a0872bb54665f00d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9d:90:9a:ab:8d:a8:61:af:97:65:57:97:e9:10:e1:57:3e:6f:1c:37:cb:ed:5a:19:ce:30:d5:8c:29:36:c8:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Timothy Baldridge,O=Timothy Baldridge,L=Highlands Ranch,ST=Colorado,C=US
Minor OS version
0
Major OS version
6
Entry point
6066544
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb