General

  • Target
    e362655ef926ad84cb9663d80c6ddb9b18ab95f32e8444272cfadc34daf8e7e8
  • Size 11.2MB
  • Sample260803-wevmnsdb88
  • SHA256 e362655ef926ad84cb9663d80c6ddb9b18ab95f32e8444272cfadc34daf8e7e8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • e362655ef926ad84cb9663d80c6ddb9b18ab95f32e8444272cfadc34daf8e7e8
    .exe 11.2MB
  • $PLUGINSDIR/NSISdl.dll
    .dll 15KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll 33KB
  • Shade.exe
    .exe 39.6MB
  • lensfun_db/6x6.xml
    29KB
  • lensfun_db/actioncams.xml
    17KB
  • lensfun_db/compact-canon.xml
    244KB
  • lensfun_db/compact-casio.xml
    6KB
  • lensfun_db/compact-fujifilm.xml
    67KB
  • lensfun_db/compact-kodak.xml
    2KB
  • lensfun_db/compact-konica-minolta.xml
    13KB
  • lensfun_db/compact-leica.xml
    8KB
  • lensfun_db/compact-nikon.xml
    39KB
  • lensfun_db/compact-olympus.xml
    34KB
  • lensfun_db/compact-panasonic.xml
    69KB
  • lensfun_db/compact-pentax.xml
    6KB
  • lensfun_db/compact-ricoh.xml
    18KB
  • lensfun_db/compact-samsung.xml
    13KB
  • lensfun_db/compact-sigma.xml
    2KB
  • lensfun_db/compact-sony.xml
    124KB
  • lensfun_db/contax.xml
    1KB
  • lensfun_db/generic.xml
    5KB
  • lensfun_db/lensfun-database.dtd
    2KB
  • lensfun_db/lensfun-database.xsd
    .xml 6KB
  • lensfun_db/mil-canon.xml
    244KB
  • lensfun_db/mil-fujifilm.xml
    208KB
  • lensfun_db/mil-hasselblad.xml
    1KB
  • lensfun_db/mil-leica.xml
    11KB
  • lensfun_db/mil-nikon.xml
    167KB
  • lensfun_db/mil-olympus.xml
    145KB
  • lensfun_db/mil-panasonic.xml
    295KB
  • lensfun_db/mil-pentax.xml
    1KB
  • lensfun_db/mil-samsung.xml
    13KB
  • lensfun_db/mil-samyang.xml
    25KB
  • lensfun_db/mil-sigma.xml
    109KB
  • lensfun_db/mil-sony.xml
    270KB
  • lensfun_db/mil-tamron.xml
    94KB
  • lensfun_db/mil-tokina.xml
    1KB
  • lensfun_db/mil-zeiss.xml
    18KB
  • lensfun_db/misc.xml
    171KB
  • lensfun_db/om-system.xml
    24KB
  • lensfun_db/rf-leica.xml
    6KB
  • lensfun_db/slr-canon.xml
    770KB
  • lensfun_db/slr-hasselblad.xml
    670B
  • lensfun_db/slr-konica-minolta.xml
    46KB
  • lensfun_db/slr-leica.xml
    451B
  • lensfun_db/slr-nikon.xml
    543KB
  • lensfun_db/slr-olympus.xml
    115KB
  • lensfun_db/slr-panasonic.xml
    437B
  • lensfun_db/slr-pentax.xml
    207KB
  • lensfun_db/slr-ricoh.xml
    2KB
  • lensfun_db/slr-samsung.xml
    1KB
  • lensfun_db/slr-samyang.xml
    16KB
  • lensfun_db/slr-schneider.xml
    5KB
  • lensfun_db/slr-sigma.xml
    439KB
  • lensfun_db/slr-soligor.xml
    589B
  • lensfun_db/slr-sony.xml
    87KB
  • lensfun_db/slr-tamron.xml
    199KB
  • lensfun_db/slr-tokina.xml
    90KB
  • lensfun_db/slr-ussr.xml
    18KB
  • lensfun_db/slr-vivitar.xml
    2KB
  • lensfun_db/slr-zeiss.xml
    14KB
  • lensfun_db/timestamp.txt
    12B
  • resources/licenses/AGPL-3.0.txt
    34KB
  • resources/licenses/LGPL-2.1.txt
    26KB
  • resources/licenses/LGPL-3.0.txt
    7KB

e362655ef926ad84cb9663d80c6ddb9b18ab95f32e8444272cfadc34daf8e7e8

  • IMPHASH 46ce5c12b293febbeb513b196aa7f843
  • SHA256 e362655ef926ad84cb9663d80c6ddb9b18ab95f32e8444272cfadc34daf8e7e8
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths