WandEnhancer-unsigned[.]zip

General

Target
WandEnhancer-unsigned.zip
Size 438KB
Sample260817-e5j57atarh
SHA256 de2e8914a9e3865c8c0721356cbd015f18ad4aa194b2676dcf91ed8152e7f377
MD5 597110e871cd4a4a1eb17029ca65baef
SHA1 53fe0264ad6630a28c8c7b77a7bee3d90c529ff6
SHA512 f8b37ac9c901e5664830efe1bd35e7a7d41d63d7bad886f97a03f4a713acf36821c155186598ce7a2c7e6a48edb37b487f7e1ff7482866752fc720085ca2590e
SSDEEP 6144:O2hD5ggNS1Y1Gg+7Je8UyL8gKtoAD1/ZD2FM6bFtwFqmKC3TI9AgGt/h4I1/8:P5g/g6vj+9ZD2F1ByFJKC3T+Agx4E
TLSH
T162A42398133F1180E5019CAADEAAB7DD4B3C15C10EE6EE70AEBC4ED02D5B14D2FD2469
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WandEnhancer.exe

File Explorer

WandEnhancer-unsigned.zip

.zip 438KB
WandEnhancer.exe

.exe 1.2MB

WandEnhancer-unsigned.zip

SHA256 de2e8914a9e3865c8c0721356cbd015f18ad4aa194b2676dcf91ed8152e7f377
MD5 597110e871cd4a4a1eb17029ca65baef
SHA1 53fe0264ad6630a28c8c7b77a7bee3d90c529ff6
SHA512 f8b37ac9c901e5664830efe1bd35e7a7d41d63d7bad886f97a03f4a713acf36821c155186598ce7a2c7e6a48edb37b487f7e1ff7482866752fc720085ca2590e
SSDEEP 6144:O2hD5ggNS1Y1Gg+7Je8UyL8gKtoAD1/ZD2FM6bFtwFqmKC3TI9AgGt/h4I1/8:P5g/g6vj+9ZD2F1ByFJKC3T+Agx4E
TLSH
T162A42398133F1180E5019CAADEAAB7DD4B3C15C10EE6EE70AEBC4ED02D5B14D2FD2469
MD5 SHA1 SHA512 SSDEEP TLSH

WandEnhancer.exe

SHA256 6b1e6a05837b1bdc547b863d7225b499b2d15b41edeb9f35a1f77f32ebe5d727
MD5 0dd64706970cf662cf69a6f5ec4264de
SHA1 2ef51ff7a55248ffd7aa8c6984c86f3c9df4970c
SHA512 d07609c3efe79753ac58162785ed4227f0504cbcbfe69404d0d0aef10c8a8addd8adf0374470a656f17080ab8cdd4e23c253446a726942dedfc21acd73c338c6
SSDEEP 12288:mACLdO4G6DSkU+QvciLCNPrny6jLmPG2RHIunGvq7sWholyBVGfQtY8:mAhQxKciAjLmPG2hiqzolyBVGfQtY8
TLSH
T1BE5549816FE4DE36E56F1735A034403896A7AC05D66BEB8FDA04BC6D2CB3348BC11766
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\Wand-Enhancer\Wand-Enhancer\WandEnhancer\bin\Release\ILRepack-7748-062619\WandEnhancer.pdb

Sharing