ApplicationWeSofts_v14[.]1[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

ApplicationWeSofts_v14.1.rar
Size

54.3MB
MD5

1089cf88fc3fb8bbbde382dc59bfb89d
SHA1

b8eb288c4a5184b71a6fa80925a44ef7518c536e
SHA256

a408d2b514f7cd7d34c17af2f6da31185fe957a515bb0aa3d80dc87a599ebd1b
SHA512

d1b3780dc25fab08908033128a9e80168f9fb0ea014ba002b944cb73410ffa8e0d46b12e238fcd1252f810880962e249247fadb7e63583db41a0a2e5522984d6
SSDEEP

98304:IIBgG2FutbTcdkFKdrJBgDEVlIAbtdlHddCf:9BgGgutsdg8FBgDClFtdJdd

Score

1^/10

Malware Config

Signatures

Files

ApplicationWeSofts_v14.1.rar
.7z

Password: wesoft
AppWeSoftFile_v14.1.exe
.exe windows x86

Password: wesoft

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RealO/DscCore.dll
.dll windows x64

Password: wesoft

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RealO/ODBC.INI
RealO/ODBCINST.INI
RealO/PFRO.log
RealO/PSDSCFileDownloadManagerEvents.dll
.dll windows x64

Password: wesoft

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RealO/en-US/DscCoreR.dll.mui
.dll windows x86

Password: wesoft

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RealO/en-US/PSDSCFileDownloadManagerEvents.dll.mui
.dll windows x86

Password: wesoft

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RealO/eulaLic.docx
.html

Sharing

General

Malware Config

Signatures

Files

Password: wesoft

Password: wesoft

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 308KB - Virtual size: 308KB

.rsrc Size: 151KB - Virtual size: 151KB

.reloc Size: 512B - Virtual size: 12B

Password: wesoft

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 49KB - Virtual size: 49KB

Password: wesoft

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 5KB - Virtual size: 5KB

Password: wesoft

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 23KB - Virtual size: 24KB

Password: wesoft

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 3KB - Virtual size: 4KB

.text
Size: 308KB - Virtual size: 308KB

.rsrc
Size: 151KB - Virtual size: 151KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 49KB - Virtual size: 49KB

.rsrc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 23KB - Virtual size: 24KB

.rsrc
Size: 3KB - Virtual size: 4KB