General

  • Target

    wsServices.rar

  • Size

    3.3MB

  • MD5

    ae63fb17653de1337ec4587cc83fe33e

  • SHA1

    3d6be3903bbcc286c75e4f538a2a3b36bdabbac2

  • SHA256

    13fa1fce14dfabb8d0a38b3dfde4fba1f52fe0db51c9d3887aec885e762005af

  • SHA512

    431c7857b5cdf33435b57eb7d224b2958b2355aaf0ec9ab08315c39bf1a096b6ebf6d11658579af41432c8f869e35cde2de826fe9c646f18ff0a0bcda2614814

  • SSDEEP

    98304:VV3WmQ6aP60iUCTh3fLpLx3wmu0aG4lWjPly:VV3c6TUCF3TpLSmu7GyIo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • wsServices.rar
    .rar
  • ElevationService.exe
    .exe windows:6 windows x86 arch:x86

    b1d04b1ebe040659866be4feed8055ce


    Code Sign

    Headers

    Imports

    Sections

  • WsidClient.dll
    .dll windows:6 windows x86 arch:x86

    54f706d6a75391e6efd79d2c781e141e


    Headers

    Imports

    Exports

    Sections

  • WsidService.exe
    .exe windows:6 windows x86 arch:x86

    e260558a6d10617ecd618451fafaab71


    Code Sign

    Headers

    Imports

    Sections