General

  • Target

    pwsafe-3.65.1.exe

  • Size

    15.0MB

  • MD5

    9fb0ae229fd41c151fcf55367cc8d11a

  • SHA1

    dce57b8aca4bb39cdb2f2e5da6bcd355d0703e7e

  • SHA256

    802a6967224d99a239f54e827a1afaed5d153f5950a7e24e8bf315444ae2c427

  • SHA512

    6eaba0ad84c679d3538e013b7307234d6c61b98d192e667a0a803af2e891f6fae5b83040c490ef1f6f06a2527477afbd7df684ce969b8db218e7cf67cf3a5566

  • SSDEEP

    393216:i7lU4h6RDhYt563gHiiED/mGajeH0qRYHaqB:miDhWEghEjtaqf3qB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • pwsafe-3.65.1.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pws-install.ini
  • ChangeLog.txt
    .vbs
  • KPV1_to_PWS.xslt
    .xml
  • KPV2_to_PWS.xslt
    .xml
  • LICENSE
  • README.md
  • ReleaseNotes.md
  • Uninstall.exe.nsis
  • pws_at.dll
    .dll windows:6 windows x86 arch:x86

    2e6ebed7c79aca043023c1d04308df64


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pws_osk.dll
    .dll windows:6 windows x86 arch:x86

    9771810b2536064fc998c4e5268053a6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pwsafe-cli.exe
    .exe windows:6 windows x86 arch:x86

    ddfd950087751d50eed488db65de3b61


    Code Sign

    Headers

    Imports

    Sections

  • pwsafe.chm
    .chm
  • pwsafe.exe
    .exe windows:6 windows x86 arch:x86

    4bd071e9a6b485e60a1cbd9bbaf09cae


    Code Sign

    Headers

    Imports

    Sections

  • pwsafe.xsd
    .xml
  • pwsafe.xsl
    .xml
  • pwsafeAR.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeCZ.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeDE.chm
    .chm
  • pwsafeDE.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeDK.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeES.chm
    .chm
  • pwsafeES.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeFR.chm
    .chm
  • pwsafeFR.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeHU.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeIT.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeKR.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeLV.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeNL.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafePL.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafePT_BR.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeRU.chm
    .chm
  • pwsafeRU.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeSL.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeSV.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeTR.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafeZH.chm
    .chm
  • pwsafeZH.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • pwsafe_filter.xsd
    .xml