AOMEI Partition Assistant Technician Edition 9[.]5 RePack by KpoJIuK[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
AOMEI Partition Assistant Technician Edition 9.5 RePack by KpoJIuK.zip
Size 27.7MB
Sample240302-s6kp1afa86
SHA256 41674b967b471ae63bdb5631cf373b4ead182203022da17dbdb722bbf1b77a67
MD5 59392b97cea01f3fabbd147d97c96856
SHA1 ec6d93b9b69b543756fa253849da30e79492fcd8
SHA512 b78836e7cb08a2972e0c5a2e0536ca77964ca68dc65c7195a0decbf5a44a1f253819aa7da67d1841dc216a2df10d5598c6257b339eadfa2fef1549d310b88857
SSDEEP 393216:YFOZOpW64un4D/0OduHivcjKU4n4mTAYA9b+j81b0Uq+1b4WUhd0EMHY5Jq9RrEI:3O5n9OHzbAt+fZhQeEr66p1K0mZMZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AOMEI Partition Assistant Technician Edition 9.5 RePack by KpoJIuK/AOMEI.Partition.Assistant.v9.5.0.exe

File Explorer

AOMEI Partition Assistant Technician Edition 9.5 RePack by KpoJIuK.zip

.zip 27.7MB
AOMEI Partition Assistant Technician Edition 9.5 RePack by KpoJIuK/AOMEI.Partition.Assistant.v9.5.0.exe

.exe 28.2MB
AOMEI Partition Assistant Technician Edition 9.5 RePack by KpoJIuK/INSTALL.cmd

745B
AOMEI Partition Assistant Technician Edition 9.5 RePack by KpoJIuK/README.txt

686B

AOMEI Partition Assistant Technician Edition 9.5 RePack by KpoJIuK.zip

SHA256 41674b967b471ae63bdb5631cf373b4ead182203022da17dbdb722bbf1b77a67
MD5 59392b97cea01f3fabbd147d97c96856
SHA1 ec6d93b9b69b543756fa253849da30e79492fcd8
SHA512 b78836e7cb08a2972e0c5a2e0536ca77964ca68dc65c7195a0decbf5a44a1f253819aa7da67d1841dc216a2df10d5598c6257b339eadfa2fef1549d310b88857
SSDEEP 393216:YFOZOpW64un4D/0OduHivcjKU4n4mTAYA9b+j81b0Uq+1b4WUhd0EMHY5Jq9RrEI:3O5n9OHzbAt+fZhQeEr66p1K0mZMZ
MD5 SHA1 SHA512 SSDEEP

AOMEI Partition Assistant Technician Edition 9.5 RePack by KpoJIuK/AOMEI.Partition.Assistant.v9.5.0.exe

IMPHASH 7eae418c7423834ffc3d79b4300bd6fb
SHA256 4cb73d3c6edacce3d0caa632fa2bb86ac6d37f3a5572b033edd6f4f032a7c967
MD5 dff29b3ae16cdb3024eb2236131c4d72
SHA1 6fd882a5629b94d6ac80be9eea4ea89b39122202
SHA512 d7c856a1abf3f24553e8ec0bbca8dd53ffae6b4f24e4fc20b34d14227d92df96c85bf17410ac8a4770956295746734fe2e7b5de88b93d5c76e256d9a42a7ac9b
SSDEEP 393216:d67CjSSEiN4TLGKBkNOLyvA2uZUar+6aFfyFILd44QIr/COhhXwIy50bXGVxlE5h:gCdNrKTtxaJyJahw6clGSRBmcOFOW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13306

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess MoveFileW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW lstrcmpW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc DeleteFileW FindFirstFileW FindNextFileW FindClose SetFilePointer ReadFile MulDiv lstrlenA WideCharToMultiByte MultiByteToWideChar WritePrivateProfileStringW FreeLibrary GetPrivateProfileStringW GetModuleHandleW LoadLibraryExW

user32

GetWindowRect GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu ScreenToClient EnableMenuItem GetDlgItem SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect SystemParametersInfoW EndDialog RegisterClassW DialogBoxParamW CreateWindowExW GetClassInfoW DestroyWindow CharNextW ExitWindowsEx SetWindowTextW LoadImageW SetTimer ShowWindow PostQuitMessage wsprintfW SetWindowLongW FindWindowExW IsWindow CreatePopupMenu AppendMenuW GetSystemMetrics DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectW CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

shell32

ShellExecuteExW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetFileInfoW SHFileOperationW SHBrowseForFolderW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ord17 ImageList_Destroy

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance