General

  • Target

    MiniTool.Partition.Wizard.12.7.All.KaranPC.zip

  • Size

    31.0MB

  • MD5

    bccd00b1efd871ba8317182a930d863a

  • SHA1

    e6fb6ba1feba3c44f72dde4e078f5dd1315d8765

  • SHA256

    7190fd236aeb401c51dfed1ac7fef11b61e419b73e8c9ee4d475a14f79298aab

  • SHA512

    3e389274ac37d5b02e67cc3394163beeab0a5eaee307922447e0335854d5bc726dfa1296d63b30daf491f79398a9db35147b7453389b3426aee59824bd1842a3

  • SSDEEP

    786432:BflyOUCn249X3V0oLs5pzpXwXKa7nZYDngHmILyKWNdOksi:BVB+5bXwX16gJmLsi

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MiniTool.Partition.Wizard.12.7.All.KaranPC.zip
    .zip
  • PartitionWizard.exe.mfh
  • Setup.exe
    .exe windows x86

    20dd26497880c05caed9305b3c8b9109


    Code Sign

    Headers

    Imports

    Sections

  • partitionwizard.dll
    .dll windows x64

    37d1c8d305d3fcc82129c95a13e696f7


    Headers

    Imports

    Exports

    Sections