General

  • Target

    wrapper-delta-pack-3.5.56.exe

  • Size

    4.8MB

  • MD5

    41f108c07cc65e2dd038447d1ce5e54c

  • SHA1

    d009b0d8bfdc45f8a8574a4c380878f1f3381c0c

  • SHA256

    1c7d3e68900e5622323b8ad102e60d502a31d258d9d6292c1d98ef3e1d3fd188

  • SHA512

    0fd5d647aca13731503a02774da7f64d6964fb45bcaa691e06b550f52d937278b56f142cbdca693b78f48c50780f47dd1742144467f01b90040a0aeaef9b325c

  • SSDEEP

    98304:a8/9ZHjWGMp35urWodZd1Vwj6prGtBGRukRNXn60Fqiz:a81ZHpMp35uCMamZOBGRukNqk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • wrapper-delta-pack-3.5.56.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    fe3375e7e4529b73ba45ab2246b9269b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • README_de.txt
  • README_en.txt
  • README_es.txt
  • README_ja.txt
  • bin/DemoApp.bat
    .bat .vbs
  • bin/InstallTestWrapper-NT.bat
    .bat .vbs
  • bin/PauseTestWrapper-NT.bat
    .bat .vbs
  • bin/QueryTestWrapper-NT.bat
    .bat .vbs
  • bin/ResumeTestWrapper-NT.bat
    .bat .vbs
  • bin/SetupTestWrapper.bat
    .bat .vbs
  • bin/StartTestWrapper-NT.bat
    .bat .vbs
  • bin/StopTestWrapper-NT.bat
    .bat .vbs
  • bin/TeardownTestWrapper.bat
    .bat .vbs
  • bin/TestWrapper.bat
    .bat .vbs
  • bin/TestWrapperCommand.bat
    .bat .vbs
  • bin/UninstallTestWrapper-NT.bat
    .bat .vbs
  • bin/demoapp
  • bin/testwrapper
  • bin/wrapper-aix-ppc-32
  • bin/wrapper-aix-ppc-64
  • bin/wrapper-freebsd-arm-64
    .elf linux aarch64
  • bin/wrapper-freebsd-x86-32
    .elf linux x86
  • bin/wrapper-freebsd-x86-64
    .elf linux x64
  • bin/wrapper-hpux-ia-32
    .elf linux ia64
  • bin/wrapper-hpux-ia-64
    .elf linux ia64
  • bin/wrapper-hpux-parisc-32
  • bin/wrapper-hpux-parisc-64
    .elf linux
  • bin/wrapper-linux-arm-64
    .elf linux aarch64
  • bin/wrapper-linux-armel-32
    .elf linux arm
  • bin/wrapper-linux-armhf-32
    .elf linux arm
  • bin/wrapper-linux-ppcle-64
    .elf linux ppc64
  • bin/wrapper-linux-x86-32
    .elf linux x86
  • bin/wrapper-linux-x86-64
    .elf linux x64
  • bin/wrapper-macosx-arm-64
    .macho macos arch:arm64
  • bin/wrapper-macosx-universal-32
    .macho macos arch:ppc arch:x86
  • bin/wrapper-macosx-universal-64
    .macho macos arch:ppc64 arch:x64
  • bin/wrapper-solaris-sparc-32
    .elf linux
  • bin/wrapper-solaris-sparc-64
    .elf linux
  • bin/wrapper-solaris-x86-32
    .elf linux x86
  • bin/wrapper-solaris-x86-64
    .elf linux x64
  • bin/wrapper-windows-x86-32.exe
    .exe windows:5 windows x86 arch:x86

    58221529ae151cadff9e6f6e4b281aac


    Code Sign

    Headers

    Imports

    Sections

  • conf/demoapp.conf
  • conf/wrapper.conf
  • doc/index.html
    .html
  • doc/revisions.txt
  • doc/wrapper-community-license-1.3.txt
  • lib/libwrapper-aix-ppc-32.so
  • lib/libwrapper-aix-ppc-64.so
  • lib/libwrapper-freebsd-arm-64.so
    .elf linux aarch64
  • lib/libwrapper-freebsd-x86-32.so
    .elf linux x86
  • lib/libwrapper-freebsd-x86-64.so
    .elf linux x64
  • lib/libwrapper-hpux-ia-32.so
    .elf linux ia64
  • lib/libwrapper-hpux-ia-64.so
    .elf linux ia64
  • lib/libwrapper-hpux-parisc-32.sl
  • lib/libwrapper-hpux-parisc-64.sl
    .elf linux
  • lib/libwrapper-linux-arm-64.so
    .elf linux aarch64
  • lib/libwrapper-linux-armel-32.so
    .elf linux arm
  • lib/libwrapper-linux-armhf-32.so
    .elf linux arm
  • lib/libwrapper-linux-ppcle-64.so
    .elf linux ppc64
  • lib/libwrapper-linux-x86-32.so
    .elf linux x86
  • lib/libwrapper-linux-x86-64.so
    .elf linux x64
  • lib/libwrapper-macosx-arm-64.dylib
    .bundle macos arch:arm64
  • lib/libwrapper-macosx-universal-32.jnilib
    .bundle macos arch:ppc arch:x86
  • lib/libwrapper-macosx-universal-64.jnilib
    .bundle macos arch:ppc64 arch:x64
  • lib/libwrapper-solaris-sparc-32.so
    .elf linux
  • lib/libwrapper-solaris-sparc-64.so
    .elf linux
  • lib/libwrapper-solaris-x86-32.so
    .elf linux x86
  • lib/libwrapper-solaris-x86-64.so
    .elf linux x64
  • lib/wrapper-windows-x86-32.dll
    .dll windows:5 windows x86 arch:x86

    1b54fa51c169b2fcd58821f2bd9b6b24


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/wrapper.jar
    .jar
  • lib/wrapperdemo.jar
    .jar
  • lib/wrappertest.jar
    .jar
  • src/bin/App.bat.in
    .vbs
  • src/bin/App.sh.in
  • src/bin/App.shconf.in
  • src/bin/AppCommand.bat.in
    .vbs
  • src/bin/AppNoWrapper.bat.in
  • src/bin/AppTemplate.bat.in
    .vbs
  • src/bin/AppTemplatePassThrough.bat.in
    .vbs
  • src/bin/InstallApp-NT.bat.in
    .vbs
  • src/bin/PauseApp-NT.bat.in
    .vbs
  • src/bin/QueryApp-NT.bat.in
    .vbs
  • src/bin/ResumeApp-NT.bat.in
    .vbs
  • src/bin/SetupApp.bat.in
    .vbs
  • src/bin/StartApp-NT.bat.in
    .vbs
  • src/bin/StopApp-NT.bat.in
    .vbs
  • src/bin/TeardownApp.bat.in
    .vbs
  • src/bin/UninstallApp-NT.bat.in
    .vbs
  • src/conf/wrapper.conf.in