Overview

overview

10

Static

static

10

file.exe

windows10-2004-x64

6

Resubmissions

14/10/2026, 09:39

261014-lm4kfazt3n10

14/10/2026, 09:28

261014-lfnweafd8910

14/10/2026, 09:25

261014-ldx2asa16j10

05/10/2026, 11:52

261005-n1sq7svzgt10

07/07/2026, 17:02

260707-vkf6ssaz9r8

Sharing

Copy URL Twitter E-mail

General

  • Target
    file.exe
  • Size 10.3MB
  • Sample261014-lfnweafd89
  • SHA256 e8ee48d5a7c6f7773aafa2350ec4c07502efc5201ac6a2949f505d243f7308da
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
revoked_codesignloaderdownloaderwailsloader

Malware Config

Extracted

Family

  • wailsloader

Attributes
  • ddr

    https://t.me/+LHzy5EOD3ypkYjRi

Signatures

  • Family: WailsLoader

    WailsLoader is a Windows malware loader written in Golang.

    loaderdownloaderwailsloader
  • Detects WailsLoader 1 IoCs
  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • file.exe
    .exe 10.3MB

file.exe

  • IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
  • SHA256 e8ee48d5a7c6f7773aafa2350ec4c07502efc5201ac6a2949f505d243f7308da
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Detects WailsLoader

  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
62:c8:64:a9:2f:d5:a4:47:97:2c:79:36:ff:36:97:41:c8:30:de:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=081408314,CN=HORECA tech d.o.o.,O=HORECA tech d.o.o.,L=Zagreb,ST=Grad Zagreb,C=HR,1.3.6.1.4.1.311.60.2.1.1=#13065a6167726562,1.3.6.1.4.1.311.60.2.1.2=#130b47726164205a6167726562,1.3.6.1.4.1.311.60.2.1.3=#13024852,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
6
Entry point
575840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths