Open-source atomic malware analysis

Analyze another

runtime.go

GO
Verdict: HOSTILE
SHA256: f2b4a73e91823bbc1cebc53f42846f7fe5501f46dbc767a401adb3d1f37b78b2
Mal-ecule
O(Eu)H₂(CrDb)Md
Size 12.9 KB download
First seen 38 days ago
Analyzed 36 days ago
Ecosystem windows

Objectives

Micro-behaviors

Metadata

0x1a context
0x1b context
0x25 fmt
0x26 fmt
0x2c sync/atomic
0x2d sync/atomic
0x3c github.com/tetratelabs/wazero/api
0x3d github.com/tetratelabs/wazero/api
0x71 github.com/tetratelabs/wazero/experimental
0x72 github.com/tetratelabs/wazero/experimental
0x9f github.com/tetratelabs/wazero/internal/expctxkeys
0xa0 github.com/tetratelabs/wazero/internal/expctxkeys
0xe1 github.com/tetratelabs/wazero/internal/sock
0xe2 github.com/tetratelabs/wazero/internal/sock
0x11c github.com/tetratelabs/wazero/internal/sys
0x11d github.com/tetratelabs/wazero/internal/sys
0x14a github.com/tetratelabs/wazero/internal/wasm
0x14b github.com/tetratelabs/wazero/internal/wasm
0x186 github.com/tetratelabs/wazero/internal/wasm/binary
0x187 github.com/tetratelabs/wazero/internal/wasm/binary
0x1bc github.com/tetratelabs/wazero/sys
0x1bd github.com/tetratelabs/wazero/sys
0xe0c // See https://www.w3.org/TR/2019/REC-wasm-core-1-20191205/#name-section①
0x265e runtime closed with exit_code(%d)
0x265f runtime closed with exit_code(%d)
0x306a module[%s] function[%s] failed: %w
0x306b module[%s] function[%s] failed: %w

Imports

NewRuntimeWithConfig
NewRuntimeConfig
cacheImpl.initEngine
config.newEngine
wasm.NewStore
len
r.store.Module
r.failIfClosed
binaryformat.DecodeModule
internal.Validate
internal.BuildMemoryDefinitions
r.store.GetFunctionTypeIDs
buildFunctionListeners
internal.AssignModuleID
r.store.Engine.CompileModule
ctx.Value
make
len
len
factory.NewFunctionListener
internal.FunctionDefinition
uint32
r.closed.Load
fmt.Errorf
uint32
r.InstantiateWithConfig
NewModuleConfig
r.CompileModule
r.InstantiateModule
r.failIfClosed
ctx.Value
config.toSysContext
r.store.Instantiate
code.Close
ctx.Value
mod.ExportedFunction
start.Call
mod.Close
se.ExitCode
fmt.Errorf
r.CloseWithExitCode
uint64
uint64
r.closed.CompareAndSwap
r.store.CloseWithExitCode
r.store.Engine.Close
github.com/tetratelabs/wazero/internal/wasm
github.com/tetratelabs/wazero/internal/expctxkeys
context
github.com/tetratelabs/wazero/api
github.com/tetratelabs/wazero/internal/sys
github.com/tetratelabs/wazero/sys
github.com/tetratelabs/wazero/internal/sock
github.com/tetratelabs/wazero/experimental
fmt
github.com/tetratelabs/wazero/internal/wasm/binary
sync/atomic
No sections found

comments

base64 in comments 11
chars 6096
empty comments 28
high entropy comments 2
lines 118
to code ratio 0.46
todo count 2
total 146
url in comments 1

file

size 13250

functions

avg length lines 17.18
avg name length 14
code in functions ratio 0.51
density per 100 lines 2.94
high entropy names 2
length stddev 19.6
max length lines 70
min length lines 3
no params count 11
total 11

identifiers

all lowercase ratio 0.55
all uppercase ratio 0.02
avg entropy 2.39
avg length 8.07
has digit ratio 0.04
high entropy count 5
high entropy ratio 0.09
length stddev 5.47
max length 22
min length 1
numeric suffix count 2
reuse ratio 0.2
sequential names 3
single char count 4
single char ratio 0.07
total 285
underscore prefix count 1
unique count 56

imports

stdlib count 3
stdlib ratio 0.05
third party count 54
third party ratio 0.95
total 57
unique modules 49

strings

avg entropy 3.72
avg length 32.54
entropy stddev 0.77
max length 50
total 26
total bytes 846

text

avg line length 34.43
char entropy 4.95
digit ratio 0.01
empty line ratio 0.1
identifier density 0.76
identifiers to functions ratio 5.09
import density 15.24
imports to functions ratio 5.18
last line length 1
line length stddev 30.78
max inline whitespace run 17
max line length 118
most common char e
most common ratio 0.09
normalized function count 0.57
normalized import count 2.95
normalized string count 1.34
normalized unique identifiers 6.55
repeated char sequences 4
space count 1434
string density 0.07
strings to functions ratio 2.36
suspicious comment ratio 0.09
suspicious identifier ratio 0.05
tab count 391
total lines 374
unique chars 81
whitespace ratio 0.17
source.functions[0] Close
source.functions[10] failIfClosed
source.functions[1] CloseWithExitCode
source.functions[2] CompileModule
source.functions[3] Instantiate
source.functions[4] InstantiateModule
source.functions[5] InstantiateWithConfig
source.functions[6] Module
source.functions[7] NewRuntime
source.functions[8] NewRuntimeWithConfig
source.functions[9] buildFunctionListeners
source.has_imports true
source.imports[0] NewModuleConfig
source.imports[10] ctx.Value
source.imports[11] factory.NewFunctionListener
source.imports[12] fmt
source.imports[13] fmt.Errorf
source.imports[14] github.com/tetratelabs/wazero/api
source.imports[15] github.com/tetratelabs/wazero/experimental
source.imports[16] github.com/tetratelabs/wazero/internal/expctxkeys
source.imports[17] github.com/tetratelabs/wazero/internal/sock
source.imports[18] github.com/tetratelabs/wazero/internal/sys
source.imports[19] github.com/tetratelabs/wazero/internal/wasm
source.imports[1] NewRuntimeConfig
source.imports[20] github.com/tetratelabs/wazero/internal/wasm/binary
source.imports[21] github.com/tetratelabs/wazero/sys
source.imports[22] internal.AssignModuleID
source.imports[23] internal.BuildMemoryDefinitions
source.imports[24] internal.FunctionDefinition
source.imports[25] internal.Validate
source.imports[26] len
source.imports[27] make
source.imports[28] mod.Close
source.imports[29] mod.ExportedFunction
source.imports[2] NewRuntimeWithConfig
source.imports[30] r.CloseWithExitCode
source.imports[31] r.CompileModule
source.imports[32] r.InstantiateModule
source.imports[33] r.InstantiateWithConfig
source.imports[34] r.closed.CompareAndSwap
source.imports[35] r.closed.Load
source.imports[36] r.failIfClosed
source.imports[37] r.store.CloseWithExitCode
source.imports[38] r.store.Engine.Close
source.imports[39] r.store.Engine.CompileModule
source.imports[3] binaryformat.DecodeModule
source.imports[40] r.store.GetFunctionTypeIDs
source.imports[41] r.store.Instantiate
source.imports[42] r.store.Module
source.imports[43] se.ExitCode
source.imports[44] start.Call
source.imports[45] sync/atomic
source.imports[46] uint32
source.imports[47] uint64
source.imports[48] wasm.NewStore
source.imports[4] buildFunctionListeners
source.imports[5] cacheImpl.initEngine
source.imports[6] code.Close
source.imports[7] config.newEngine
source.imports[8] config.toSysContext
source.imports[9] context
source.strings[0] // See https://www.w3.org/TR/2019/REC-wasm-core-1-20191205/#name-section①
source.strings[10] module[%s] function[%s] failed: %w
source.strings[11] runtime closed with exit_code(%d)
source.strings[12] sync/atomic
source.strings[1] context
source.strings[2] github.com/tetratelabs/wazero/api
source.strings[3] github.com/tetratelabs/wazero/experimental
source.strings[4] github.com/tetratelabs/wazero/internal/expctxkeys
source.strings[5] github.com/tetratelabs/wazero/internal/sock
source.strings[6] github.com/tetratelabs/wazero/internal/sys
source.strings[7] github.com/tetratelabs/wazero/internal/wasm
source.strings[8] github.com/tetratelabs/wazero/internal/wasm/binary
source.strings[9] github.com/tetratelabs/wazero/sys

Identity

SHA-256 f2b4a73e91823bbc1cebc53f42846f7fe5501f46dbc767a401adb3d1f37b78b2
Filename runtime.go

Origin

Ecosystem windows

Timeline

First seen 7 May 2026 10:22 UTC
Last analyzed 8 May 2026 19:11 UTC