General

  • Target

    2b62457926a1c3f8f69934532b15c178ca5e88460e65f6dcd7fe59f8b3887fb4

  • Size

    4.8MB

  • MD5

    24b31149495152907a0601da27d6dc43

  • SHA1

    c3f9b263f880db928bc4e24c3a1b266f0cdeeb61

  • SHA256

    2b62457926a1c3f8f69934532b15c178ca5e88460e65f6dcd7fe59f8b3887fb4

  • SHA512

    727eb2a491e1f7fde838268ab41c10069b822d93ac561d36552d3a5c5f3d51ada58efbc93193e4a50261a1643cb0f0142c7f561ddc5092593d49d8e7c1eab35f

  • SSDEEP

    98304:iutIKBB6rqxUee3KGFfxKizfzYyQzOvJ2/T9Fu4SJRI82z/GOR6QT22:iC7BtUH3b/Q2J2L9FuBHT22e

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 2b62457926a1c3f8f69934532b15c178ca5e88460e65f6dcd7fe59f8b3887fb4
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinPcap_4_1_3.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bootOptions.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/Packet.dll
    .dll windows:4 windows x86 arch:x86

    19fa7010cacd16ef346ea8bbc2e8b999


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/pthreadVC.dll
    .dll windows:4 windows x86 arch:x86

    90ee61357770484e2d085958b94141a3


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/wpcap.dll
    .dll windows:4 windows x86 arch:x86

    10dce091d63eed72dc0010ebc8838f6a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinPcapInstall.dll
    .dll windows:4 windows x86 arch:x86

    ad1fff2efc5a1aa2884d5c780a51aa99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • rpcapd.exe
    .exe windows:4 windows x86 arch:x86

    2b9e73ff502840fe6b381682c42d43cf


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/insthelper.dll
    .dll windows:5 windows x86 arch:x86

    518f3e031346c358c7e583fb4af7704c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/res/skin/ask_icon.png
    .png
  • $PLUGINSDIR/res/skin/btn_blue_90_30.png
    .png
  • $PLUGINSDIR/res/skin/btn_close.png
    .png
  • $PLUGINSDIR/res/skin/btn_push.png
    .png
  • $PLUGINSDIR/res/skin/btn_white_90_30.png
    .png
  • $PLUGINSDIR/res/skin/checkbox.png
    .png
  • $PLUGINSDIR/res/skin/checkout.png
    .png
  • $PLUGINSDIR/res/skin/done.png
    .png
  • $PLUGINSDIR/res/skin/dot_down.png
    .png
  • $PLUGINSDIR/res/skin/dot_up.png
    .png
  • $PLUGINSDIR/res/skin/error.png
    .png
  • $PLUGINSDIR/res/skin/gb.png
    .png
  • $PLUGINSDIR/res/skin/ic_info_46.png
    .png
  • $PLUGINSDIR/res/skin/slogen.png
    .png
  • $PLUGINSDIR/res/skin/title_icon_image.png
    .png
  • $PLUGINSDIR/res/skin/triangle.png
    .png
  • BugReport.exe
    .exe windows:5 windows x86 arch:x86

    a2a39775615883acc56f335883a108f7


    Code Sign

    Headers

    Imports

    Sections

  • Lead.dll
    .dll windows:6 windows x86 arch:x86

    cc5b3dcffeaecdbc0bcb79a74ecb46a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PacketDotNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SMYIpc.dll
    .dll windows:5 windows x86 arch:x86

    3428185b7dec7999e2373ffc92c7dad7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SharpPcap.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Uninst.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • Wisdom.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • WisdomCoreAssist.dll
    .dll windows:5 windows x86 arch:x86

    7b921a2a72701b61878f1dba193b39d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WisdomProxy.exe
    .exe windows:5 windows x86 arch:x86

    67e446c0d796c5b0f4483672ccfa2b52


    Code Sign

    Headers

    Imports

    Sections

  • WisdomSvr.exe
    .exe windows:5 windows x86 arch:x86

    61d196a5a687057eb83bcdec3fc86754


    Code Sign

    Headers

    Imports

    Sections

  • WisdomTips.exe
    .exe windows:5 windows x86 arch:x86

    67c51de75ab48ab855ee5278d05bcabf


    Code Sign

    Headers

    Imports

    Sections

  • WisdomUpgrader.exe
    .exe windows:5 windows x86 arch:x86

    6c27a4ec09438a76499c18e0828dafe9


    Code Sign

    Headers

    Imports

    Sections

  • libeay32.dll
    .dll windows:6 windows x86 arch:x86

    c3edb07c6cec72157974f88fdf8fcd9f


    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections