General

  • Target
    8401ddca603be3a8750e2b611b0a4afde79855e46e397cd30a9c88a3c948f0fe
  • Size 4.8MB
  • Sample240912-vda17svanf
  • SHA256 8401ddca603be3a8750e2b611b0a4afde79855e46e397cd30a9c88a3c948f0fe
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • 8401ddca603be3a8750e2b611b0a4afde79855e46e397cd30a9c88a3c948f0fe
    .exe 4.8MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/WinPcap_4_1_3.exe
    .exe 893KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/bootOptions.ini
    342B
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-header.bmp
    29KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $SYSDIR/Packet.dll
    .dll 99KB
  • $SYSDIR/pthreadVC.dll
    .dll 52KB
  • $SYSDIR/wpcap.dll
    .dll 275KB
  • WinPcapInstall.dll
    .dll 91KB
  • rpcapd.exe
    .exe 115KB
  • $PLUGINSDIR/insthelper.dll
    .dll 3.0MB
  • $PLUGINSDIR/res/skin/ask_icon.png
    .png 2KB
  • $PLUGINSDIR/res/skin/btn_blue_90_30.png
    .png 1KB
  • $PLUGINSDIR/res/skin/btn_close.png
    .png 1KB
  • $PLUGINSDIR/res/skin/btn_push.png
    .png 3KB
  • $PLUGINSDIR/res/skin/btn_white_90_30.png
    .png 1KB
  • $PLUGINSDIR/res/skin/checkbox.png
    .png 15KB
  • $PLUGINSDIR/res/skin/checkout.png
    .png 184B
  • $PLUGINSDIR/res/skin/done.png
    .png 3KB
  • $PLUGINSDIR/res/skin/dot_down.png
    .png 1KB
  • $PLUGINSDIR/res/skin/dot_up.png
    .png 14KB
  • $PLUGINSDIR/res/skin/error.png
    .png 4KB
  • $PLUGINSDIR/res/skin/gb.png
    .png 4KB
  • $PLUGINSDIR/res/skin/ic_info_46.png
    .png 1KB
  • $PLUGINSDIR/res/skin/slogen.png
    .png 6KB
  • $PLUGINSDIR/res/skin/title_icon_image.png
    .png 1KB
  • $PLUGINSDIR/res/skin/triangle.png
    .png 993B
  • BugReport.exe
    .exe 846KB
  • Lead.dll
    .dll 262KB
  • Newtonsoft.Json.dll
    .dll 398KB
  • PacketDotNet.dll
    .dll 215KB
  • SMYIpc.dll
    .dll 85KB
  • SharpPcap.dll
    .dll 80KB
  • Uninst.exe
    .exe 2.3MB
  • Wisdom.exe
    .exe 215KB
  • WisdomCoreAssist.dll
    .dll 760KB
  • WisdomProxy.exe
    .exe 738KB
  • WisdomSvr.exe
    .exe 689KB
  • WisdomTips.exe
    .exe 1005KB
  • WisdomUpgrader.exe
    .exe 861KB
  • libeay32.dll
    .dll 1.2MB
  • msvcp120.dll
    .dll 444KB
  • msvcr120.dll
    .dll 948KB

8401ddca603be3a8750e2b611b0a4afde79855e46e397cd30a9c88a3c948f0fe

  • IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
  • SHA256 8401ddca603be3a8750e2b611b0a4afde79855e46e397cd30a9c88a3c948f0fe
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13893
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths