Overview

overview

7

Static

static

3

wds_current_setup.exe

windows7-x64

7

wds_current_setup.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$_5_.exe

windows7-x64

7

$_5_.exe

windows10-2004-x64

7

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

shfolder.dll

windows7-x64

1

shfolder.dll

windows10-2004-x64

1

wdsh0407.chm

windows7-x64

1

wdsh0407.chm

windows10-2004-x64

1

wdsh040e.chm

windows7-x64

1

wdsh040e.chm

windows10-2004-x64

1

wdsh0415.chm

windows7-x64

1

wdsh0415.chm

windows10-2004-x64

1

wdsr0405.dll

windows7-x64

1

wdsr0405.dll

windows10-2004-x64

1

wdsr0407.dll

windows7-x64

1

wdsr0407.dll

windows10-2004-x64

1

wdsr040a.dll

windows7-x64

1

wdsr040a.dll

windows10-2004-x64

1

wdsr040b.dll

windows7-x64

1

wdsr040b.dll

windows10-2004-x64

1

wdsr040c.dll

windows7-x64

1

wdsr040c.dll

windows10-2004-x64

1

wdsr040e.dll

windows7-x64

1

wdsr040e.dll

windows10-2004-x64

1

Resubmissions

25-06-2024 08:05

240625-jy4ngaxhmb 7

25-06-2024 07:59

240625-jvs3ka1cnj 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    wds_current_setup.exe

  • Size

    630KB

  • MD5

    3abf1c149873e25d4e266225fbf37cbf

  • SHA1

    6fa92dd2ca691c11dfbfc0a239e34369897a7fab

  • SHA256

    370a27a30ee57247faddeb1f99a83933247e07c8760a07ed82e451e1cb5e5cdd

  • SHA512

    b6d9672a580a02299bc370deb1fd99b5ca10ab86456385870cdae522c185ae51f8d390a7c50fcb5c7898523f52c834bb73515ffc6d0b0bcde210640e815ece9e

  • SSDEEP

    12288:yCjeMsiGVBKvjxTNlZaLlcMj+wXZvQpd9nP2+ZMU2tYspZcMwr/GNd35:yCjeTZa7BTsxewXZUTP2HU2yawjY5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • wds_current_setup.exe
    .exe windows:4 windows x86 arch:x86

    97318da386948415d08cef4a9006d669


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $_5_
    .exe windows:4 windows x86 arch:x86

    b3e2efb711bd309a22addde2f35c372c


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    97318da386948415d08cef4a9006d669


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • shfolder.dll
    .dll windows:5 windows x86 arch:x86

    a8568b57714f17bea2cb443650a1c951


    Headers

    Imports

    Exports

    Sections

  • wdsh0407.chm
    .chm
  • wdsh040e.chm
    .chm
  • wdsh0415.chm
    .chm
  • wdsr0405.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr0407.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr040a.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr040b.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr040c.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr040e.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr0410.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr0413.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr0415.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr0419.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • wdsr0425.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • windirstat.chm
    .chm
  • windirstat.exe
    .exe windows:4 windows x86 arch:x86

    7c6d8e50d7c0e8326fce0f8eecb79276


    Headers

    Imports

    Sections