General

  • Target
    voicewave_installer_20260622.1782149848318b5507780.exe
  • Size 2.0MB
  • Sample260701-pgmlhsdy5m
  • SHA256 942aad800fd45a2bcdf737460872f13b9d3ffbcbe0e841ffdd16e304d7eb7649
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 4 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • voicewave_installer_20260622.1782149848318b5507780.exe
    .exe 2.0MB
  • $TEMP/downloader_easeus/1.0.0/46free/Chinese.ini
    2KB
  • $TEMP/downloader_easeus/1.0.0/46free/ChineseTrad.ini
    2KB
  • $TEMP/downloader_easeus/1.0.0/46free/EDownloader.exe
    .exe 1.2MB
  • $TEMP/downloader_easeus/1.0.0/46free/French.ini
    3KB
  • $TEMP/downloader_easeus/1.0.0/46free/German.ini
    3KB
  • $TEMP/downloader_easeus/1.0.0/46free/InitConfigure.ini
    3KB
  • $TEMP/downloader_easeus/1.0.0/46free/Italian.ini
    2KB
  • $TEMP/downloader_easeus/1.0.0/46free/Japanese.ini
    3KB
  • $TEMP/downloader_easeus/1.0.0/46free/Korean.ini
    3KB
  • $TEMP/downloader_easeus/1.0.0/46free/LanguageTransfor.ini
    305B
  • $TEMP/downloader_easeus/1.0.0/46free/Portuguese.ini
    2KB
  • $TEMP/downloader_easeus/1.0.0/46free/Spanish.ini
    2KB
  • $TEMP/downloader_easeus/1.0.0/46free/aliyun/AliyunConfig.ini
    1KB
  • $TEMP/downloader_easeus/1.0.0/46free/aliyun/AliyunWrap.dll
    .dll 476KB
  • $TEMP/downloader_easeus/1.0.0/46free/aliyun/AliyunWrapExe.exe
    .exe 101KB
  • $TEMP/downloader_easeus/1.0.0/46free/aliyun/InfoForSetup.exe
    .exe 60KB
  • $TEMP/downloader_easeus/1.0.0/46free/downloader.ico
    395KB
  • $TEMP/downloader_easeus/1.0.0/46free/english.ini
    2KB
  • $TEMP/downloader_easeus/1.0.0/46free/skin.zip
    .zip 516KB
  • CoverInstallDialog.xml
    .xml 1KB
  • ProductRunningDialog.xml
    .xml 1KB
  • QuitInstallDialog.xml
    .xml 1KB
  • StartRunDialog.xml
    .xml 1KB
  • contrastivePage.xml
    .xml 11KB
  • downloadErrorPage.xml
    1KB
  • finishpage-3img.xml
    3KB
  • finishpage.xml
    1KB
  • homePage.xml
    5KB
  • install.xml
    1KB
  • installErrorPage.xml
    2KB
  • installingpage.xml
    1KB
  • res/btn_lv1_no_dis.png
    .png 1KB
  • res/btn_lv1_no_hov.png
    .png 992B
  • res/btn_lv1_no_nor.png
    .png 1KB
  • res/btn_lv1_no_pre.png
    .png 1007B
  • res/btn_lv1_yes_dis.png
    .png 1KB
  • res/btn_lv1_yes_hov.png
    .png 975B
  • res/btn_lv1_yes_nor.png
    .png 992B
  • res/btn_lv1_yes_pre.png
    .png 1007B
  • res/btn_lv2_no_dis.png
    .png 1KB
  • res/btn_lv2_no_hov.png
    .png 882B
  • res/btn_lv2_no_nor.png
    .png 1KB
  • res/btn_lv2_no_pre.png
    .png 907B
  • res/btn_lv2_yes_dis.png
    .png 944B
  • res/btn_lv2_yes_hov.png
    .png 863B
  • res/btn_lv2_yes_nor.png
    .png 882B
  • res/btn_lv2_yes_pre.png
    .png 907B
  • res/checkbox_disable.png
    .png 135B
  • res/checkbox_hover.png
    .png 135B
  • res/checkbox_sel.png
    .png 328B
  • res/checkbox_unsel.png
    .png 142B
  • res/easeus_logo.png
    .png 2KB
  • res/finish.png
    .png 129KB
  • res/ico_checked.png
    .png 282B
  • res/ico_close_dis.png
    .png 464B
  • res/ico_close_hov.png
    .png 590B
  • res/ico_close_nor.png
    .png 464B
  • res/ico_close_pre.png
    .png 600B
  • res/ico_down_dis.png
    .png 332B
  • res/ico_down_hov.png
    .png 269B
  • res/ico_down_nor.png
    .png 329B
  • res/ico_down_pre.png
    .png 326B
  • res/ico_folder_dis.png
    .png 580B
  • res/ico_folder_hov.png
    .png 477B
  • res/ico_folder_nor.png
    .png 560B
  • res/ico_folder_pre.png
    .png 572B
  • res/ico_list_dis.png
    .png 333B
  • res/ico_list_hov.png
    .png 264B
  • res/ico_list_nor.png
    .png 326B
  • res/ico_list_pre.png
    .png 336B
  • res/ico_minimize_dis.png
    .png 220B
  • res/ico_minimize_hov.png
    .png 330B
  • res/ico_minimize_nor.png
    .png 218B
  • res/ico_minimize_pre.png
    .png 390B
  • res/ico_tip_install.png
    .png 6KB
  • res/ico_up_dis.png
    .png 346B
  • res/ico_up_hov.png
    .png 251B
  • res/ico_up_nor.png
    .png 340B
  • res/ico_up_pre.png
    .png 353B
  • res/ico_warning.png
    .png 3KB
  • res/icon_download.png
    .png 10KB
  • res/icon_manager.png
    .png 11KB
  • res/icon_transfer.png
    .png 11KB
  • res/install_err.png
    .png 11KB
  • res/installing_progress_bk.png
    .png 222KB
  • res/logo.png
    .png 33KB
  • res/net_err.png
    .png 24KB
  • res/progress_bar_d.png
    .png 260B
  • res/progress_bar_t.png
    .png 259B
  • res/roll_dis.png
    .png 330B
  • res/roll_hov.png
    .png 319B
  • res/roll_nor.png
    .png 313B
  • res/roll_pre.png
    .png 310B
  • res/setting_split.png
    .png 906B

voicewave_installer_20260622.1782149848318b5507780.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 942aad800fd45a2bcdf737460872f13b9d3ffbcbe0e841ffdd16e304d7eb7649
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ec:7f:4d:a0:7e:34:80:b6:47:a7:5f:d8:56:43:ee:a2:2e:c9:a7:2f:c7:61:61:37:1b:76:a0:cf:49:4a:c9:38
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91510107765360104N,CN=CHENGDU YIWO Tech Development Co.\, Ltd.,O=CHENGDU YIWO Tech Development Co.\, Ltd.,L=成都市,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e6ada6e4beafe58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e59b9be5b79de79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths