Wic Reset Connect[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Wic Reset Connect.exe
Size 12.3MB
Sample261102-ped7csvy4r
SHA256 bf43db6b6bcfdafeb6033379b0364bdda79389b851c874e3310faf1d6f0ad09c
MD5 3a3dd1e4032fbfbdaef222149c3aea7a
SHA1 c2caf3ac70d6c9df8e5318895232eff29fcb28f3
SHA512 0872db830f087692173de3205504f5566b95b25160eab8d8785a2800538d41a662219568e62cad0971950b122fda3f61da3daa1cea3b071fc6ea308b871bda70
SSDEEP 196608:miHrmsTx7KMmzVPUbbiNb4rojDIg9Cbk/V8YS2TsCnrtqwvikGvzCHCEuV6athfX:mGms9OnzFNb/DMWhrt/gCHgV6wfpKf8v
TLSH
T176D6F112BFDA8471D492217289AFE7FE653AEE600B3445D352D03D2BBD702C2193A75B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Wic Reset Connect.exe

.exe 12.3MB

Wic Reset Connect.exe

IMPHASH a91dbb0f1610001684b8a03d2b1fb116
SHA256 bf43db6b6bcfdafeb6033379b0364bdda79389b851c874e3310faf1d6f0ad09c
MD5 3a3dd1e4032fbfbdaef222149c3aea7a
SHA1 c2caf3ac70d6c9df8e5318895232eff29fcb28f3
SHA512 0872db830f087692173de3205504f5566b95b25160eab8d8785a2800538d41a662219568e62cad0971950b122fda3f61da3daa1cea3b071fc6ea308b871bda70
SSDEEP 196608:miHrmsTx7KMmzVPUbbiNb4rojDIg9Cbk/V8YS2TsCnrtqwvikGvzCHCEuV6athfX:mGms9OnzFNb/DMWhrt/gCHgV6wfpKf8v
TLSH
T176D6F112BFDA8471D492217289AFE7FE653AEE600B3445D352D03D2BBD702C2193A75B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

7e:74:70:0b:1a:3c:9c:63:72:01:c3:90:de:ec:9d:79:30:33:03:16:ca:93:13:e1:43:87:27:33:02:cf:29:52

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,L=Alexandria,ST=Virginia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Jul 16, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

01:fc:d2:3f:74:82:d9:78:19:02:c0:e2:0a:b0:98:23

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 31, 2024 - Jul 30, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

2269630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Jenkins\workspace\HelpwireClient-Windows-Custom\cpp\Windows\build\Release-Win32\helpwire-client-gui.pdb

gdi32

ExtSelectClipRgn CreatePatternBrush SelectPalette GetObjectType CreateHatchBrush CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetTextColor CreateRoundRectRgn CreateEllipticRgn CreatePolygonRgn GetBkColor Polyline Ellipse Polygon CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo RealizePalette OffsetRgn SetLayout ExtFloodFill CreatePalette GetPaletteEntries SetPaletteEntries GetNearestPaletteIndex GetSystemPaletteEntries GetViewportOrgEx GetWindowOrgEx PtInRegion SetViewportExtEx FrameRgn GetBoundsRect EnumFontFamiliesExW GetTextFaceW SetPixelV GetLayout SetTextAlign IntersectClipRect ExcludeClipRect GetClipBox SetMapMode SetROP2 SetPolyFillMode RestoreDC SaveDC ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx LPtoDP ScaleViewportExtEx CopyMetaFileW SetPixel StretchBlt SetDIBColorTable SetDIBits GetDIBits OffsetViewportOrgEx SetViewportOrgEx GetPixel GetWindowExtEx GetViewportExtEx CreateRectRgn SelectClipRgn FillRgn CreateDIBSection RoundRect CreateFontW Escape ExtTextOutW RectVisible PtVisible CreateBitmap GetDeviceCaps MoveToEx BitBlt GetTextExtentPoint32W GetTextMetricsW LineTo SetTextColor DeleteDC CreateFontIndirectW GetCurrentObject SetBkColor CreateDCW SetBkMode DeleteObject SelectObject CreateCompatibleDC CreateCompatibleBitmap GetObjectW SetTextJustification TextOutW GetStockObject CreateSolidBrush Rectangle CreatePen GetRgnBox

user32

LoadBitmapW ModifyMenuW EnableMenuItem CheckMenuItem IntersectRect InflateRect ShowWindow MoveWindow SetWindowTextW IsDialogMessageW CheckDlgButton IsWindowEnabled GetWindowDC ClientToScreen GetMenuState GetMenuStringW InsertMenuW RemoveMenu GetMessageW TranslateMessage GetActiveWindow SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextLengthW GetWindowTextW GetLastActivePopup DispatchMessageW BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW MonitorFromWindow GetMonitorInfoW MapWindowPoints ScrollWindow TrackPopupMenu GetKeyState SetMenu GetMenuCheckMarkDimensions GetScrollRange SetScrollPos GetScrollPos ShowScrollBar ValidateRect GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxW CreateWindowExW GetClassInfoExW GetClassInfoW BringWindowToTop AdjustWindowRectEx EqualRect DeferWindowPos WindowFromPoint SetWindowPlacement GetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu GetWindowLongW SetWindowPos GetWindow SetClassLongW GetClassLongW DrawFocusRect FrameRect ScreenToClient CopyRect GetFocus KillTimer GrayStringW DrawTextExW DrawTextW TabbedTextOutW EndPaint LockWindowUpdate SetParent InsertMenuItemW LoadAcceleratorsW BeginPaint GetParent PostQuitMessage GetClientRect InvalidateRect GetScrollInfo SystemParametersInfoW SetMenuItemBitmaps LoadMenuW IsRectEmpty SetRectEmpty OffsetRect SetCapture GetNextDlgGroupItem DestroyIcon DrawIconEx CopyImage GetIconInfo LoadImageW ReleaseCapture EndDialog GetNextDlgTabItem CreateDialogIndirectParamW SetActiveWindow SetForegroundWindow GetForegroundWindow GetWindowThreadProcessId AttachThreadInput SetTimer LoadIconW DestroyMenu UpdateWindow GetSystemMetrics ReleaseDC GetDesktopWindow DrawStateW CharUpperW GetMenuItemInfoW GetMenuDefaultItem IsMenu SetScrollRange SetMenuDefaultItem EnableWindow RegisterWindowMessageW SendMessageW LoadCursorW GetWindowRect CreatePopupMenu AppendMenuW wsprintfW IsWindowVisible IsWindow GetCursorPos GetSysColor DestroyCursor RedrawWindow SetWindowLongW CopyIcon PtInRect FillRect SetCursor PostMessageW DestroyAcceleratorTable CreateAcceleratorTableW TranslateAcceleratorW OpenClipboard EmptyClipboard ReuseDDElParam UnpackDDElParam CharUpperBuffW DeleteMenu GetSystemMenu IsIconic IsZoomed CloseClipboard SetClipboardData GetDC SetWindowRgn MonitorFromPoint GetAsyncKeyState MessageBeep RegisterClipboardFormatW MapDialogRect SetWindowContextHelpId GetSysColorBrush PostThreadMessageW WaitMessage ShowOwnedPopups DrawFrameControl SetScrollInfo NotifyWinEvent DrawEdge SetRect EnumDisplayMonitors SetLayeredWindowAttributes RealChildWindowFromPoint UnionRect EnableScrollBar UpdateLayeredWindow CopyAcceleratorTableW ToUnicodeEx MapVirtualKeyW GetKeyboardLayout GetKeyboardState UnregisterClassW IsClipboardFormatAvailable DefFrameProcW DefMDIChildProcW DrawMenuBar TranslateMDISysAccel SetCursorPos EnumChildWindows CharNextW InvalidateRgn GetUpdateRect SubtractRect GetKeyNameTextW GetDoubleClickTime InvertRect HideCaret IsCharLowerW MapVirtualKeyExW CreateMenu DrawIcon GetWindowRgn GetUserObjectInformationW GetProcessWindowStation RegisterClassW

advapi32

CloseServiceHandle OpenServiceW DeleteService CreateServiceW ChangeServiceConfig2W QueryServiceConfigW StartServiceW ControlService RegOpenKeyExW RegQueryValueExW RegCloseKey RegCreateKeyExW RegSetValueExW OpenProcessToken GetTokenInformation OpenServiceA QueryServiceStatusEx RegEnumValueW RegDeleteKeyW RegQueryValueW ConvertStringSecurityDescriptorToSecurityDescriptorW RegDeleteValueW RegEnumKeyW RegEnumKeyExW SetFileSecurityW InitializeSecurityDescriptor SetSecurityDescriptorDacl AllocateAndInitializeSid SetEntriesInAclW FreeSid EnumServicesStatusExW CryptEnumProvidersW CryptReleaseContext CryptDestroyKey CryptGetProvParam CryptAcquireContextW CryptGetUserKey CryptExportKey CryptDestroyHash CryptSignHashW CryptSetHashParam CryptCreateHash CryptDecrypt DeregisterEventSource ReportEventW RegisterEventSourceW OpenSCManagerW

kernel32

IsValidCodePage GetOEMCP GetACP GetCPInfo IsProcessorFeaturePresent GetTimeZoneInformation IsDebuggerPresent UnhandledExceptionFilter TerminateProcess QueryPerformanceCounter HeapDestroy HeapCreate SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle SetUnhandledExceptionFilter HeapSize HeapQueryInformation ExitProcess HeapReAlloc CreateThread ExitThread RaiseException RtlUnwind SetStdHandle VirtualQuery GetSystemInfo VirtualAlloc FindFirstFileExW GetDriveTypeW GetSystemTimeAsFileTime EncodePointer DecodePointer HeapAlloc HeapFree GetStartupInfoW HeapSetInformation FindResourceExW GetNumberFormatW VirtualProtect GetProfileIntW GetTempFileNameW SearchPathW GetFileTime GetFileSizeEx GetFileAttributesExW SetErrorMode GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle TlsGetValue GetFileAttributesW GlobalReAlloc GlobalGetAtomNameW FileTimeToLocalFileTime GetTickCount GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW lstrcmpA GetCurrentThread GetUserDefaultUILanguage ConvertDefaultLocale GetSystemDefaultUILanguage CompareStringA GetLocaleInfoW LoadLibraryExW ReleaseActCtx CreateActCtxW GetFullPathNameW GetVolumeInformationW SetEndOfFile UnlockFile LockFile FlushFileBuffers DeleteFileW lstrcmpiW GetThreadLocale GetCurrentProcessId GetStringTypeW MulDiv ResumeThread SetThreadPriority FreeResource GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW InitializeCriticalSectionAndSpinCount ActivateActCtx DeactivateActCtx lstrcmpW LocalAlloc LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetTimeFormatW GetDateFormatW GetVersionExW GetCurrentThreadId GetUserDefaultLCID CreateMutexW GlobalUnlock GlobalLock InterlockedExchangeAdd InterlockedDecrement InterlockedExchange InterlockedIncrement SetConsoleOutputCP lstrcpyW GetWindowsDirectoryW WinExec LoadLibraryW FreeLibrary GlobalFree GlobalAlloc FormatMessageW GetOverlappedResult DeviceIoControl CreateEventW CopyFileW GetSystemDirectoryW CreateProcessW GetTempPathW MoveFileExW GetExitCodeProcess WaitForSingleObject LocalFree GetCommandLineW GetModuleHandleW GetProcAddress SetEvent CreateEventA WaitForSingleObjectEx lstrlenW lstrlenA FindResourceW LoadResource GetConsoleMode GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetFullPathNameA WriteConsoleW SetEnvironmentVariableA ResetEvent ReleaseSemaphore WaitForMultipleObjectsEx CreateSemaphoreA CancelIo GetModuleHandleA GetModuleHandleExW InterlockedCompareExchange DeleteFiber SwitchToFiber CreateFiber GetEnvironmentVariableW GetVersion ConvertFiberToThread ConvertThreadToFiber LoadLibraryA SetConsoleMode ReadConsoleA ReadConsoleW PeekNamedPipe LCMapStringW SetConsoleCtrlHandler GlobalSize GetConsoleCP FormatMessageA RemoveDirectoryW AreFileApisANSI SetWaitableTimer OpenEventA CreateWaitableTimerA QueryPerformanceFrequency GetDriveTypeA FindFirstFileExA CreateFileA GetTimeFormatA GetProcessHeap DosDateTimeToFileTime SetFilePointer SystemTimeToFileTime GetCurrentProcess CreateDirectoryW SetFileTime WriteFile WideCharToMultiByte ReadFile CreateFileW MultiByteToWideChar GetCurrentDirectoryW GetFileType DuplicateHandle CloseHandle FileTimeToDosDateTime GetFileSize FindFirstFileW MapViewOfFile UnmapViewOfFile FileTimeToSystemTime GetLastError FindClose GetLocalTime CreateFileMappingW FindNextFileW GetFileInformationByHandle GetSystemTime GetModuleFileNameW SetLastError Sleep SizeofResource LockResource GetDateFormatA

msimg32

TransparentBlt GradientFill AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

shell32

SHGetPathFromIDListW ShellExecuteW ShellExecuteExW SHGetFileInfoW SHAppBarMessage DragFinish DragQueryFileW SHGetFolderPathW SHBrowseForFolderW CommandLineToArgvW SHGetMalloc SHGetSpecialFolderLocation SHGetDesktopFolder

comctl32

ImageList_GetImageCount InitCommonControlsEx ImageList_ReplaceIcon ImageList_GetIcon ImageList_Create ImageList_GetIconSize ImageList_Destroy ImageList_DrawEx

shlwapi

PathRemoveFileSpecW PathStripToRootW PathIsUNCW PathFindExtensionW PathAppendW PathFindFileNameW

ole32

OleLockRunning CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes CoRegisterMessageFilter DoDragDrop OleGetClipboard OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator RegisterDragDrop CoLockObjectExternal OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoGetClassObject CreateStreamOnHGlobal CoInitialize CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize CoCreateGuid CoInitializeEx RevokeDragDrop CoUninitialize OleDuplicateData StringFromCLSID CoTaskMemAlloc ReleaseStgMedium CoTaskMemFree CoCreateInstance StgCreateDocfileOnILockBytes

oleaut32

SysFreeString SysAllocStringLen VariantChangeType SysAllocString VariantClear VariantInit VariantCopy SysStringLen SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VarBstrFromDate OleCreateFontIndirect

oledlg

OleUIBusyW

gdiplus

GdipGetImageHeight GdipGetImagePixelFormat GdiplusStartup GdipCreateBitmapFromStream GdipCreateBitmapFromHBITMAP GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI GdiplusShutdown GdipDrawImageI GdipDeleteGraphics GdipGetImageGraphicsContext GdipDisposeImage GdipFree GdipAlloc GdipCloneImage GdipCreateBitmapFromScan0 GdipBitmapUnlockBits GdipBitmapLockBits GdipGetImagePalette GdipGetImagePaletteSize GdipGetImageWidth

setupapi

SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW CM_Locate_DevNodeW CM_Get_DevNode_Registry_PropertyW SetupDiGetDeviceInterfaceDetailW CM_Get_Parent CM_Get_Child CM_Get_Sibling SetupDiEnumDeviceInterfaces SetupDiGetClassDevsW CM_Get_Device_IDW SetupCopyOEMInfW SetupDiInstallClassW

psapi

GetDeviceDriverBaseNameW EnumDeviceDrivers GetDeviceDriverFileNameW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

ws2_32

connect WSASetLastError WSAIoctl getaddrinfo WSAGetLastError freeaddrinfo getnameinfo shutdown htons setsockopt recv socket send getsockname closesocket WSACleanup WSAStartup inet_ntoa

oleacc

AccessibleObjectFromWindow CreateStdAccessibleObject LresultFromObject

imm32

ImmGetOpenStatus ImmReleaseContext ImmGetContext

winmm

PlaySoundW

crypt32

CertOpenSystemStoreW CertCloseStore CertEnumCertificatesInStore CertGetCertificateContextProperty CertOpenStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext

bcrypt

BCryptGenRandom

Name

.text

Size

3.9MB

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

287KB

Virtual Size

334KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

137B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

417KB

Virtual Size

416KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Wic Reset Connect.exe

gdi32

user32

advapi32

kernel32

msimg32

comdlg32

winspool.drv

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

setupapi

psapi

version

ws2_32

oleacc

imm32

winmm

crypt32

bcrypt

generic