wx360-1[.]6[.]rar

General

Target

wx360-1.6.rar
Size

80KB
MD5

a07a02d0bf44a016d9c8db46822e26a8
SHA1

96743acf2c5b9be81d071d4b95c3c3f69f0e3404
SHA256

726e1c6cfdc039750b3e397b1f76b26eeb971ec475f5d7a4c3e2542a61ba9dd9
SHA512

d9ae8635491107141db087d4d0f3a534e0a8f2275b95c8545472a123d6ca8925fc6978cf43b641ed219ec0b5f8ab03a7754778cba24ffb416145fd21a30e5a84
SSDEEP

1536:+BWpBhu9KMmWm4zwCl9IoXwF3EI7jZ6nb4/ioeuz6rv2IvKrOGHBP09U6I3O9UGH:JnhyO/CHvwG6jZ6nsveuueK2hPebQW

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/wx360.exe
unpack001/wxMN.dll

Files

wx360-1.6.rar
.rar
wx360.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wxMN.dll
.dll windows:4 windows x86 arch:x86

6a4ecc37294c7950a68d9fa225335ce9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
DeviceIoControl
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr80

__clean_type_info_names_internal
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
free
_encoded_null
_malloc_crt
_encode_pointer
vsprintf_s
_unlock
memcpy
memset

Exports

Exports

??0CwxMN@@QAE@XZ
??4CwxMN@@QAEAAV0@ABV0@@Z
getMN
wxMN_ERROR_NO_DVD
wxMN_ERROR_NO_DVD9
wxMN_ERROR_NO_MEDIA
wxMN_ERROR_TO_SMALL

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 128KB - Virtual size: 125KB

.rsrc Size: 36KB - Virtual size: 34KB

.reloc Size: 4KB - Virtual size: 12B

6a4ecc37294c7950a68d9fa225335ce9

Headers

File Characteristics

Imports

kernel32

msvcr80

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 428B

.reloc Size: 512B - Virtual size: 390B

.text
Size: 128KB - Virtual size: 125KB

.rsrc
Size: 36KB - Virtual size: 34KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 428B

.reloc
Size: 512B - Virtual size: 390B