General

  • Target

    hetman_partition_recovery (1).exe

  • Size

    14.4MB

  • MD5

    2e38acafdd1217158022eb20bfb375dc

  • SHA1

    9409779c5c5b1c435621fe092f1cdedd6cf0444e

  • SHA256

    66e9f4d03e67dbcbd9d3a13bfc45b2c11e712b677e990e8ea1b405b60a3a40b2

  • SHA512

    e6f8b3021fee20d4dfdda272f63ec4a23d61809b4b83b7fcfb8bcd8e7d3e554f7f103e14f748d060c2839fe537c04cf8a0f6dfa8244fcb570d8e6ba7e465201e

  • SSDEEP

    393216:BI4dmkHNSQu2lFIEoLKjEGUln1jQdDSrzYlBEHZ:BJHNS7rEoLCP6BCfY

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • hetman_partition_recovery (1).exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Options_English.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Hetman Partition Recovery.chm
    .chm
  • Hetman Partition Recovery.exe
    .exe windows:5 windows x86 arch:x86

    581756560dd3961ceef1582573677d79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Language/Arabic.lng
  • Language/Chinese.lng
  • Language/Deutsch.lng
  • Language/English.lng
  • Language/French.lng
  • Language/Italian.lng
  • Language/Japanese.lng
  • Language/Russian.lng
  • Language/Spanish.lng
  • Language/Ukrainian.lng
  • Language/common/Arabic.lng
  • Language/common/Chinese.lng
  • Language/common/Deutsch.lng
  • Language/common/English.lng
  • Language/common/French.lng
  • Language/common/Italian.lng
  • Language/common/Japanese.lng
  • Language/common/Russian.lng
  • Language/common/Spanish.lng
  • Language/common/Ukrainian.lng
  • Resources/DSKImageMenu.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    51df91f12a054d4e3e7e9bd236c72b6a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/DiskMenu.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    01cf1876343fa55725ca413b08c58322


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/FileExt.dll
    .dll windows:1 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Resources/LoadRAW.dll
    .dll windows:4 windows x86 arch:x86

    308343f319894f4aa30ec1ea62e0045b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/MagicPDF.dll
    .dll windows:5 windows x86 arch:x86

    cfffa640694082a03aeca64533a2322d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/StarBurn.dll
    .dll windows:6 windows x86 arch:x86

    ea720829252e09062268736bb8fda232


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/magic_cmp.dll
    .dll windows:4 windows x86 arch:x86

    71fc45db7a81ce236f432a828a4e8fcd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/magic_jbig.exe
    .exe windows:5 windows x86 arch:x86

    d12209f9fb21829c6b138e300a2e7cae


    Code Sign

    Headers

    Imports

    Sections

  • Resources/msvcr100d.dll
    .dll windows:5 windows x86 arch:x86

    0dc7b0e0b0a7b26ca080f7c56e8c0b34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/wp_type1ttf.dll
    .dll windows:5 windows x86 arch:x86

    c417bb79f3b1f3040f76d57a1e05d087


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Settings.ini
  • Uninstall.exe.nsis
  • media_dll/SDL-2.dll
    .dll windows:4 windows x86 arch:x86

    d0e13975df147229287ce6fd6cea2383


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • media_dll/SDL.dll
    .dll windows:4 windows x86 arch:x86

    d0e13975df147229287ce6fd6cea2383


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • media_dll/avcodec-54.dll
    .dll windows:4 windows x86 arch:x86

    84b34a6f341f5339a02e4e387605288c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • media_dll/avdevice-54.dll
    .dll windows:4 windows x86 arch:x86

    baabff4017bc3b76ee85e20b87f6f770


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • media_dll/avfilter-3.dll
    .dll windows:4 windows x86 arch:x86

    5e0f51cf695a4584ad702264e31dda80


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • media_dll/avformat-54.dll
    .dll windows:4 windows x86 arch:x86

    9674a183aacb4148dfbf8db0e7e51830


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • media_dll/avutil-52.dll
    .dll windows:4 windows x86 arch:x86

    e0df73c0f31393cc9d0c80ae058cb473


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • media_dll/swresample-0.dll
    .dll windows:4 windows x86 arch:x86

    d8f91c2740a8964dfcb434832db800e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • media_dll/swscale-2.dll
    .dll windows:4 windows x86 arch:x86

    bdd686222e4dc451f28b77a336761e78


    Code Sign

    Headers

    Imports

    Exports

    Sections