General

  • Target

    2e3bc53584af03c6ed27ea07a8aa15b4f1629409419d755afdc3cf1b6eb0af29

  • Size

    4.8MB

  • MD5

    7ad61553717a738e6b7d7888ac87cc6d

  • SHA1

    7051ac694e6ef1039a75f41b9ef0e5ea02f56eea

  • SHA256

    2e3bc53584af03c6ed27ea07a8aa15b4f1629409419d755afdc3cf1b6eb0af29

  • SHA512

    40d233a04b181c87f0b83542c4ec7c2e7aa04d1372ad06561434b130d43aae6bb9724c1eed5892544c378ff780fcd3dfbbaf8685468b5e0398e8e667d628998a

  • SSDEEP

    98304:iutIKBB6rqxUee3KGFfxKizfzYyQzOvJ2/T9Fu4SJRI82z/GOR6QT2w:iC7BtUH3b/Q2J2L9FuBHT224

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 2e3bc53584af03c6ed27ea07a8aa15b4f1629409419d755afdc3cf1b6eb0af29
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinPcap_4_1_3.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bootOptions.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/Packet.dll
    .dll windows:4 windows x86 arch:x86

    19fa7010cacd16ef346ea8bbc2e8b999


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/pthreadVC.dll
    .dll windows:4 windows x86 arch:x86

    90ee61357770484e2d085958b94141a3


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/wpcap.dll
    .dll windows:4 windows x86 arch:x86

    10dce091d63eed72dc0010ebc8838f6a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinPcapInstall.dll
    .dll windows:4 windows x86 arch:x86

    ad1fff2efc5a1aa2884d5c780a51aa99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • rpcapd.exe
    .exe windows:4 windows x86 arch:x86

    2b9e73ff502840fe6b381682c42d43cf


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/insthelper.dll
    .dll windows:5 windows x86 arch:x86

    518f3e031346c358c7e583fb4af7704c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/res/skin/ask_icon.png
    .png
  • $PLUGINSDIR/res/skin/btn_blue_90_30.png
    .png
  • $PLUGINSDIR/res/skin/btn_close.png
    .png
  • $PLUGINSDIR/res/skin/btn_push.png
    .png
  • $PLUGINSDIR/res/skin/btn_white_90_30.png
    .png
  • $PLUGINSDIR/res/skin/checkbox.png
    .png
  • $PLUGINSDIR/res/skin/checkout.png
    .png
  • $PLUGINSDIR/res/skin/done.png
    .png
  • $PLUGINSDIR/res/skin/dot_down.png
    .png
  • $PLUGINSDIR/res/skin/dot_up.png
    .png
  • $PLUGINSDIR/res/skin/error.png
    .png
  • $PLUGINSDIR/res/skin/gb.png
    .png
  • $PLUGINSDIR/res/skin/ic_info_46.png
    .png
  • $PLUGINSDIR/res/skin/slogen.png
    .png
  • $PLUGINSDIR/res/skin/title_icon_image.png
    .png
  • $PLUGINSDIR/res/skin/triangle.png
    .png
  • BugReport.exe
    .exe windows:5 windows x86 arch:x86

    a2a39775615883acc56f335883a108f7


    Code Sign

    Headers

    Imports

    Sections

  • Lead.dll
    .dll windows:6 windows x86 arch:x86

    cc5b3dcffeaecdbc0bcb79a74ecb46a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PacketDotNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SMYIpc.dll
    .dll windows:5 windows x86 arch:x86

    3428185b7dec7999e2373ffc92c7dad7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SharpPcap.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Uninst.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • Wisdom.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • WisdomCoreAssist.dll
    .dll windows:5 windows x86 arch:x86

    7b921a2a72701b61878f1dba193b39d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WisdomProxy.exe
    .exe windows:5 windows x86 arch:x86

    67e446c0d796c5b0f4483672ccfa2b52


    Code Sign

    Headers

    Imports

    Sections

  • WisdomSvr.exe
    .exe windows:5 windows x86 arch:x86

    61d196a5a687057eb83bcdec3fc86754


    Code Sign

    Headers

    Imports

    Sections

  • WisdomTips.exe
    .exe windows:5 windows x86 arch:x86

    67c51de75ab48ab855ee5278d05bcabf


    Code Sign

    Headers

    Imports

    Sections

  • WisdomUpgrader.exe
    .exe windows:5 windows x86 arch:x86

    6c27a4ec09438a76499c18e0828dafe9


    Code Sign

    Headers

    Imports

    Sections

  • libeay32.dll
    .dll windows:6 windows x86 arch:x86

    c3edb07c6cec72157974f88fdf8fcd9f


    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections