WandEnhancer-unsigned[.]zip

General

Target
WandEnhancer-unsigned.zip
Size 389KB
Sample260718-tgr88aav2s
SHA256 fa2be208d3660b5170e83d5461eebc944b8017b534de19a2b0320cb9964efcb5
MD5 6f3751bd6f7f1996181b4a7edc313187
SHA1 a249564b8a89268c987f842b3d6ef7f7a851e346
SHA512 694f29bff7d84fb8d6a768bdfa7d0fdbaf59eeca8d2bb61646ab16e7900d8a60523fb285a7620b7a0c52d8d22da6d5e0c6f725db778f38b2ecedc94dda453a15
SSDEEP 6144:tiSH0TliOp4Eam40H9GRtBZAZe7dBFtBLpr8WcgWCQVBZD4yJtxx/GEgV:tsiVERrGPBaZuDftpAWRUD40O9V
TLSH
T16A84233932C31541B727B5640B81B97F26836FDEB23A434CBCA3A355A5E2385BCA541D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WandEnhancer.exe

File Explorer

WandEnhancer-unsigned.zip

.zip 389KB
WandEnhancer.exe

.exe 1.1MB

WandEnhancer-unsigned.zip

SHA256 fa2be208d3660b5170e83d5461eebc944b8017b534de19a2b0320cb9964efcb5
MD5 6f3751bd6f7f1996181b4a7edc313187
SHA1 a249564b8a89268c987f842b3d6ef7f7a851e346
SHA512 694f29bff7d84fb8d6a768bdfa7d0fdbaf59eeca8d2bb61646ab16e7900d8a60523fb285a7620b7a0c52d8d22da6d5e0c6f725db778f38b2ecedc94dda453a15
SSDEEP 6144:tiSH0TliOp4Eam40H9GRtBZAZe7dBFtBLpr8WcgWCQVBZD4yJtxx/GEgV:tsiVERrGPBaZuDftpAWRUD40O9V
TLSH
T16A84233932C31541B727B5640B81B97F26836FDEB23A434CBCA3A355A5E2385BCA541D
MD5 SHA1 SHA512 SSDEEP TLSH

WandEnhancer.exe

SHA256 0b1849959da8b38dc78f4a2d7180432fac07236bd88e3bf43abe623a7fc71b47
MD5 c22141826bf18fa6317f895d9b939d7f
SHA1 4edf823326c99b71c9d1a5e074c75ded50fda2a7
SHA512 472cfb3996916419d6bafd2320d6e360ea797f4e488c819cce99f5e1f954209559f98016991397b6f6b321805cb709fb90a74ca003333cfe0cc745760cc96026
SSDEEP 12288:GPL4pV7XSffimFggMpjnyooPim4C8keN5nktBkGwPo8:GPLP51ojnyooPimot8tBkGwPo8
TLSH
T17E4527806FE8DE2AE5AF1775A030403452A7ED05EA6BEB4FCA04BD6D1CB2344BC51767
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\Wand-Enhancer\Wand-Enhancer\WandEnhancer\bin\Release\ILRepack-3092-006530\WandEnhancer.pdb

Sharing