General

  • Target
    wink-ai_setup_installer.exe
  • Size 9.7MB
  • Sample260620-bbk9lsdy4s
  • SHA256 f84d509407226efe6fb63e77746f74404a527e12aa977453cb39878c7daa1ef7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • wink-ai_setup_installer.exe
    .exe 9.7MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/DataReport/MTDataReport.exe
    .exe 36KB
  • $PLUGINSDIR/DataReport/libcrypto-1_1-x64.dll
    .dll 3.3MB
  • $PLUGINSDIR/DataReport/libcurl.dll
    .dll 495KB
  • $PLUGINSDIR/DataReport/libdataReport.dll
    .dll 1.3MB
  • $PLUGINSDIR/DataReport/libssl-1_1-x64.dll
    .dll 685KB
  • $PLUGINSDIR/DataReport/mfc140.dll
    .dll 5.4MB
  • $PLUGINSDIR/DataReport/msvcr100.dll
    .dll 815KB
  • $PLUGINSDIR/DataReport/zlib1.dll
    .dll 99KB
  • $PLUGINSDIR/SkinEngine.dll
    .dll 3.6MB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/libapm.dll
    .dll 112KB
  • $PLUGINSDIR/libcrypto-1_1.dll
    .dll 2.3MB
  • $PLUGINSDIR/libcurl.dll
    .dll 450KB
  • $PLUGINSDIR/libssl-1_1.dll
    .dll 507KB
  • $PLUGINSDIR/libtortoisedl.dll
    .dll 235KB
  • $PLUGINSDIR/msvcp140.dll
    .dll 430KB
  • $PLUGINSDIR/setupConfig.ini
    13KB
  • $PLUGINSDIR/vcruntime140.dll
    .dll 79KB
  • $PLUGINSDIR/zlib1.dll
    .dll 83KB

wink-ai_setup_installer.exe

  • IMPHASH be41bf7b8cc010b614bd36bbca606973
  • SHA256 f84d509407226efe6fb63e77746f74404a527e12aa977453cb39878c7daa1ef7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d0:8d:ae:3c:09:fa:52:2a:f7:03:ac:d2:eb:b5:03:03:6d:5c:93:f8:09:77:c5:c0:e1:8c:59:e3:f4:3d:e8:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91350200072847665F,CN=Xiamen Home Meitu Technology Co.\, Ltd.,O=Xiamen Home Meitu Technology Co.\, Ltd.,L=Xiamen,ST=Fujian,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13065869616d656e,1.3.6.1.4.1.311.60.2.1.2=#130646756a69616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
5
Entry point
14511
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths