LoadWFsoftPlugInsForm
WFsoftPlugInsAuthor
WFsoftPlugInsDate
WFsoftPlugInsDescription
WFsoftPlugInsSoftware
WFsoftPlugInsVersion
WFsoftPlugInsWebsite
Overview
overview
3Static
static
3wfCalc/Plu...nv.dll
windows7-x64
1wfCalc/Plu...nv.dll
windows10-2004-x64
1wfCalc/Plu...lc.dll
windows7-x64
1wfCalc/Plu...lc.dll
windows10-2004-x64
1wfCalc/Plu...ph.dll
windows7-x64
1wfCalc/Plu...ph.dll
windows10-2004-x64
1wfCalc/Plu...nv.dll
windows7-x64
1wfCalc/Plu...nv.dll
windows10-2004-x64
1wfCalc/Ski...ce.ps1
windows7-x64
1wfCalc/Ski...ce.ps1
windows10-2004-x64
1wfCalc/help.chm
windows7-x64
1wfCalc/help.chm
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
wfCalc/PlugIns/DigiConv.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
wfCalc/PlugIns/DigiConv.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
wfCalc/PlugIns/LICalc.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
wfCalc/PlugIns/LICalc.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
wfCalc/PlugIns/MGraph.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
wfCalc/PlugIns/MGraph.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
wfCalc/PlugIns/MeasConv.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
wfCalc/PlugIns/MeasConv.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
wfCalc/Skin/09-橄榄-Sustenance.ps1
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
wfCalc/Skin/09-橄榄-Sustenance.ps1
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
wfCalc/help.chm
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
wfCalc/help.chm
Resource
win10v2004-20231215-en
Target
0439a6aca4f24f1934acb1da8bcf7de1
Size
1.1MB
MD5
0439a6aca4f24f1934acb1da8bcf7de1
SHA1
b7cb11460eb0bc081133a32971ad713524e57385
SHA256
14ee17c628ec72b1bcbc493c7e05dc49f452301fbb45bd11c26ab8014a1ff2df
SHA512
c079cbef63fe4710e8ade876fc59b17a7a3e96d11bc42ec5be6303eb0c33d88c4189fcd77d02b819068558d33afb9228b7cfb0464e7e9bb7045617886d11eacb
SSDEEP
24576:btzy9FGDyLp8I26AddJwlRBXBXRfR+8m+M7G:btzy/GDm8IZAdv8RTXH6G
Checks for missing Authenticode signature.
resource |
---|
unpack001/wfCalc/PlugIns/DigiConv.dll |
unpack001/wfCalc/PlugIns/LICalc.dll |
unpack001/wfCalc/PlugIns/MGraph.dll |
unpack001/wfCalc/PlugIns/MeasConv.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadWFsoftPlugInsForm
WFsoftPlugInsAuthor
WFsoftPlugInsDate
WFsoftPlugInsDescription
WFsoftPlugInsSoftware
WFsoftPlugInsVersion
WFsoftPlugInsWebsite
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadWFsoftPlugInsForm
WFsoftPlugInsAuthor
WFsoftPlugInsDate
WFsoftPlugInsDescription
WFsoftPlugInsSoftware
WFsoftPlugInsVersion
WFsoftPlugInsWebsite
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadWFsoftPlugInsForm
WFsoftPlugInsAuthor
WFsoftPlugInsDate
WFsoftPlugInsDescription
WFsoftPlugInsSoftware
WFsoftPlugInsVersion
WFsoftPlugInsWebsite
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadWFsoftPlugInsForm
WFsoftPlugInsAuthor
WFsoftPlugInsDate
WFsoftPlugInsDescription
WFsoftPlugInsSoftware
WFsoftPlugInsVersion
WFsoftPlugInsWebsite
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ