WandEnhancer-unsigned[.]zip

General

Target
WandEnhancer-unsigned.zip
Size 389KB
Sample261110-ynq2ysc19v
SHA256 896839b20103d407d335dab212e11c39b8cf72338dad903837d81662217ddeac
MD5 eb517ccf669054908caba9ba65789305
SHA1 286c428da60eb3c3f86c017a0349ef9285a5d7c1
SHA512 f0445cd2892353693e0928db8fa6947771f00438e2f76355472a37bfda5ac16135e8ff2021d71cafb7a176ed21dfafbf126acdd6fff02a775adcfa0fbca0a871
SSDEEP 12288:sRi3Yf5Sh3p/DHW1LYJ19Mw7HWj8fbfQopZ:33Yf5Sp//JbWj8s8Z
TLSH
T1F28423E139C3F6680DEA456C39A6F0F764B503797D324015DADCD046BDEB930E5A0A8B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WandEnhancer.exe

File Explorer

WandEnhancer-unsigned.zip

.zip 389KB
WandEnhancer.exe

.exe 1.1MB

WandEnhancer-unsigned.zip

SHA256 896839b20103d407d335dab212e11c39b8cf72338dad903837d81662217ddeac
MD5 eb517ccf669054908caba9ba65789305
SHA1 286c428da60eb3c3f86c017a0349ef9285a5d7c1
SHA512 f0445cd2892353693e0928db8fa6947771f00438e2f76355472a37bfda5ac16135e8ff2021d71cafb7a176ed21dfafbf126acdd6fff02a775adcfa0fbca0a871
SSDEEP 12288:sRi3Yf5Sh3p/DHW1LYJ19Mw7HWj8fbfQopZ:33Yf5Sp//JbWj8s8Z
TLSH
T1F28423E139C3F6680DEA456C39A6F0F764B503797D324015DADCD046BDEB930E5A0A8B
MD5 SHA1 SHA512 SSDEEP TLSH

WandEnhancer.exe

SHA256 cc1873953acf622fbfbb6bb1960e814918ce286f958e7cf7e95850b3a49c4eca
MD5 f2c7360d0a79560b1318285f20c75300
SHA1 107cc7bf1e3ea778e8eb52e1fbdd594f6635d627
SHA512 31a5d2f27a9c2a21759d87edc1552ccfcc0597e6442d1dc6f659ed0f300e5eb8ad9b553a3acf8f2b20f3f63325a283f4cfb4ba4dacb5e725de1c551d4576651c
SSDEEP 12288:jZjmdGYmtktAnQqRpjnyooPiR4OsOhTtUnkpBeGmPl8:jZjLGqnjnyooPiRhxZpBeGmPl8
TLSH
T1E04527806FE8DE2AE5AF1775A030403456A7ED05EA6BEB0FCA04BD6D1CB2344BC51767
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\Wand-Enhancer\Wand-Enhancer\WandEnhancer\bin\Release\ILRepack-9004-053191\WandEnhancer.pdb

Sharing