WandEnhancer-unsigned[.]zip

General

Target
WandEnhancer-unsigned.zip
Size 438KB
Sample260723-ync54awcrb
SHA256 a8c1e5d2e18e489af0f025f3f6971a278d5e645b0b4b105017a1c74f554b5eeb
MD5 32e2d2cb0c806d5e890e7cb99bee94ac
SHA1 4b253d01ec7555abeb6a10c72ee7030349acadbb
SHA512 27379a98879684ff6cb80e31678647da1f2826d5d90b43a31e376f75d105acca619563b5301e7a9fced4c4a085c584027285cc6e3fc20a3648556822ad71e8bb
SSDEEP 12288:DvxfgR2M6LucVZD2FfrBniOT8AprDct72GcH:DvGd66cVZSN5iJooaJ
TLSH
T1F4A423D4271D1B62E206C48BDDD4B7E7173D12D2703CE9F0EA21E839A9AB8AD7E01534
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WandEnhancer.exe

File Explorer

WandEnhancer-unsigned.zip

.zip 438KB
WandEnhancer.exe

.exe 1.2MB

WandEnhancer-unsigned.zip

SHA256 a8c1e5d2e18e489af0f025f3f6971a278d5e645b0b4b105017a1c74f554b5eeb
MD5 32e2d2cb0c806d5e890e7cb99bee94ac
SHA1 4b253d01ec7555abeb6a10c72ee7030349acadbb
SHA512 27379a98879684ff6cb80e31678647da1f2826d5d90b43a31e376f75d105acca619563b5301e7a9fced4c4a085c584027285cc6e3fc20a3648556822ad71e8bb
SSDEEP 12288:DvxfgR2M6LucVZD2FfrBniOT8AprDct72GcH:DvGd66cVZSN5iJooaJ
TLSH
T1F4A423D4271D1B62E206C48BDDD4B7E7173D12D2703CE9F0EA21E839A9AB8AD7E01534
MD5 SHA1 SHA512 SSDEEP TLSH

WandEnhancer.exe

SHA256 8c6d9cd593f2171602f01d79bd47f3e52100b5ccd0f3ff7fe0ab20c6f1899399
MD5 770309d96dddedd8f7718213dfcd965c
SHA1 07d98842897616865bbd5413d42377c53a5220e5
SHA512 bff25b285736e7ff3b596abf85b8290c3dac92bbd7ed0f5742081c410f78c9915885d71c01966003686f71136acc97254a8d10c1b676d51428fc73351b6b597c
SSDEEP 12288:nACLdO4G6DSkUpQvciLCNPrnT6jLmPG2RHIunGvq7sWholyBVGlQte8:nAhQ+KciJjLmPG2hiqzolyBVGlQte8
TLSH
T1E05549816FE4DE36E56F1735A034403896A7AC05D66BEB8FDA04BC6D2CB3348BC11766
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\Wand-Enhancer\Wand-Enhancer\WandEnhancer\bin\Release\ILRepack-6260-180187\WandEnhancer.pdb

Sharing