Wampserver2[.]4-x86[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Wampserver2.4-x86.zip
Size 34.2MB
Sample260710-pcep4sa16m
SHA256 18d58b9c2d89447e616ebb231c6eac6740159f3b68fcb1afac3e772e3bb5abab
MD5 72a73134611bde21f54367424c1b9474
SHA1 c11039e0f6100d294f43d2abcf0726f694bfc6a3
SHA512 670171d9a5764782012eeb97be0a39e018382e1f5cffa572558475cea67d0bf59a6ed8952b9aa4f8643757265964ea98a7cd2bf80d6e490922f1dad5289343c6
SSDEEP 786432:P5nOU7ZwWKJOrtCiJYg+ZO8EPZwjtq2vakPrhutS7:1wjOgiCg+4PwjvvDPrsS7
TLSH
T1AC773352F7876D3F61715E1FA7B2E45305E2C0D1E7AC3EC2AC855982BC28984863BE71
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Wampserver2.4-x86.exe

Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

Inno Setup installer

installer

resource	yara_rule
static1/unpack001/Wampserver2.4-x86.exe	innosetup

File Explorer

Wampserver2.4-x86.zip

.zip 34.2MB
Wampserver2.4-x86.exe

.exe 34.4MB

Wampserver2.4-x86.zip

SHA256 18d58b9c2d89447e616ebb231c6eac6740159f3b68fcb1afac3e772e3bb5abab
MD5 72a73134611bde21f54367424c1b9474
SHA1 c11039e0f6100d294f43d2abcf0726f694bfc6a3
SHA512 670171d9a5764782012eeb97be0a39e018382e1f5cffa572558475cea67d0bf59a6ed8952b9aa4f8643757265964ea98a7cd2bf80d6e490922f1dad5289343c6
SSDEEP 786432:P5nOU7ZwWKJOrtCiJYg+ZO8EPZwjtq2vakPrhutS7:1wjOgiCg+4PwjvvDPrsS7
TLSH
T1AC773352F7876D3F61715E1FA7B2E45305E2C0D1E7AC3EC2AC855982BC28984863BE71
MD5 SHA1 SHA512 SSDEEP TLSH

Wampserver2.4-x86.exe

SHA256 9b3673a62cab6bdde03e25475f0567088b4d16b617e32341445960e4d056c527
MD5 facebc265269666b6a5ce19211a38de9
SHA1 f8720058f3bec57958028918179f9d3469bf3210
SHA512 088d776b5b8ecad57804a7e67e0bc412d9cf0451b656f52b4ba271ee1db28c688c318238120ff6efe13f5eff54c01877d576889e1f7cb3677ca457ea4f18e01d
SSDEEP 786432:yhNyUdzQOK5oxPmARkSwZEAU5xFwy/kg9Lp+R0W:gQdoQA+Swa7xx/T9LM0W
TLSH
T1A2873312B747E93AD0305E3AD7A5A8F307E3DE92EE643A8368457F827934D44C136A71
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Inno Setup is an open-source installation builder for Windows applications.

Inno Setup installer

installer

Minor OS version

Major OS version

Entry point

42488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1024B

Virtual Size

592B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

205KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Wampserver2.4-x86.zip

Wampserver2.4-x86.exe

generic