General

  • Target

    7a2a33d544a3f1d91ce2fe7c6b7437a639c8fea39610c2abb822cbcdc929d394

  • Size

    860KB

  • MD5

    48d04fc6d7dbca3fbd06c29f88018b8f

  • SHA1

    4b9dd49d1bcafc24327e5d555938bcf0f9821e00

  • SHA256

    7a2a33d544a3f1d91ce2fe7c6b7437a639c8fea39610c2abb822cbcdc929d394

  • SHA512

    cb0055a61ed0570838a7c176e2f5c946b18e8576707d5e1ada8d06d9e04e3ff42a9e53d801e031d7b3d2de89a48806b613fa2add33ef80ee1a1550e6d1ed378f

  • SSDEEP

    12288:VSaJUk0nNGLWXiEW8+C7OwcP2dqefLbYgVeQdOZXdpfhMpO77JSUO4t9OXW37Gul:VonsvVQ7wP2kUbtVnY3YyVviWLGuUY

Score
1/10

Malware Config

Signatures

Files

  • 7a2a33d544a3f1d91ce2fe7c6b7437a639c8fea39610c2abb822cbcdc929d394
    .zip

    Password: infected

  • Program Files (x86)/WanNengInput/WnPYSkinPreview.dll
    .dll windows:6 windows x86 arch:x86

    68b5a3a27f189ef4649f4c363d990478


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/McAfee/QuarMeta/738cc98c-9387-44ce-aacc-0feb0e706c39
    .xml