8be10b8832cc48b560968cb173eae886

resource
8be10b8832cc48b560968cb173eae886

IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
SHA256 089187ead6b8d1dfd7c411428996d64567fb0ea302dfe8df1e8faac74da5de2f
MD5 8be10b8832cc48b560968cb173eae886
SHA1 5f1e7eb2a639921f1e5f0802655a39591f40d818
SHA512 b1fea7269ee92c836f92b67e53a85f8d2590aa115873d44e9e4535629b3c4893b9369b1b184956cec2f6abb3fa0c1533940527087f8dda65cc9a60b1a46ee697
SSDEEP 6144:2fhhdPkbTgORbEkcmYOG/37MnGZoeKxpuuQzo+:2RcXgOWk9fu37MnGZoDxpuxo+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW WaitForSingleObject CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GlobalUnlock lstrcpynW GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

.data

SHA256 a4e3056ea97b2b99e24278c90aaea74124692a7085698566f09beff88a59b1a0
MD5 2aa587c909999ca52be17d0f1ffbd186
SHA1 a77216fa18c7686e98066908e9db90eb2cd3f3f0
SHA512 c2d8c8a44ec9e8362d628e7c5e3a2d10cfbcacb03e73fb6bddaa2363ef8987f7060860eddea1de11482e05e2bf1785cd7ffa19e301a924dc8f3b00864b343ac2
MD5 SHA1 SHA512

.rdata

SHA256 6ad49235d45effedf007c3ceea536d6eb2a1fb32b60262dd03d564466847f7db
MD5 d6b0bc2db2de2a3dd996fda6539cef0e
SHA1 512954cc6b5829df5905f68d3150be5cbfab917c
SHA512 7ba64d550d66803377f36940591d39b7ddd686d4ff5eea1674c4fcdca56c0f2b833e6e48dccf0f16fc345e6b4dcfb079b3dfb49626fed85659c85219a4afd120
SSDEEP 96:CFZYMl8xCav/omsaRYyFGi3xBtY2rhpDPhxyPYPkyfRJc2l:+ZYLzopIYuGStY4TDLyPYdRW2
MD5 SHA1 SHA512 SSDEEP

.rsrc/DIALOG/105

SHA256 a04ad2b6e47a894f64bfcda7866df98bd8692b68a3e0e9e670cf08edb16c9290
MD5 a3765af764aaaec746d53b2974e8d9e9
SHA1 112be1babec2820b199e9b30bd85220a7a0aa2ed
SHA512 9f560fcd02b009ac485e49332d98ffbfe8eb905151cfeb88c4f11f944f8b6cb89512ac0afbd271b533c4735a35e9a590ed5f550dd159df024ef08c502ae129f8
MD5 SHA1 SHA512

.rsrc/DIALOG/106

SHA256 efae027a4f1c45428c7f60efab156071cd9ebebe6091a35dbfc2c5d6f8ce4eb7
MD5 f4eefaccd6fe882d445a3bf34e90e319
SHA1 6a17d9f2a8c8c00470b2ca09450bba8470848684
SHA512 4e465cd2bf80f584a7fcc4ab81f590d4e8c150c3476f76a2d521d88d57303fd557c1ae00e46985de5b95edb5ae918a31c29e19859b42cede0926c544a0e75236
MD5 SHA1 SHA512

.rsrc/DIALOG/111

SHA256 cb3c86cbcb579244a6f819f9c1807a7e89b6e600982ec6ea0841fcdcb16a9efd
MD5 663040d6315b1d6ce8c0334d182ed8fc
SHA1 ebcfff801a12fb8ad1200a4526fca8bd2c3e96cf
SHA512 a6a4dd7641083e24e09ff1e851e26b191a46f623705098777baf0784003637577417330e78df6bdd28efc98d0cb9edd1d259cb78327946eae5e7a5117d13445f
MD5 SHA1 SHA512

.rsrc/DIALOG/205

SHA256 4ff20589d50335f903b069344f10ff5148829c5a7040fac9d666c4975836a508
MD5 c3956c88ddceaddb34676e23950175c4
SHA1 b1e613bd6010b0cb68133ca496c23421526e45f7
SHA512 25e615a506cf62f4b777e4480e5d9323eaa06690bf897c2f2c2bdeca4c1b5feba7dab091b2481a77863d1a2ad044326a8fa07ad61725daf38aaa7a27e8b475a1
MD5 SHA1 SHA512

.rsrc/DIALOG/206

SHA256 1eb711cf7d5761639175448086236e9d4654e284eeec8a23f97243da1bcb2e67
MD5 9a36fe144e5c267de04dec87672ecb6c
SHA1 ea56c4b767ac6329dfda48e9e44366b3f7dbf2ef
SHA512 cfe686b0e7bd60a3df4db4df2b4f0c6d298e86a448786762b2ff53e673a84def654b93d879d23bc13e55b5cf25da2696826a0ad5cac930c273161b52ce8e7e15
MD5 SHA1 SHA512

.rsrc/DIALOG/211

SHA256 8c64a2341dc473a7d8ab4956af589e9a7257c4f05a8dc229f862c16d49ba37e5
MD5 30dab3583979c2008e8de9295ab7c36b
SHA1 186cd9560b358bbf8b523d1050573f22bb00264d
SHA512 a5d8d56c8cb7bd6dd5c5e71700cdc50c02a9ace1b30d51392a7ca9c7afbe3d2a291ef1b127d5070bd12b7431237588e0a3de170b7d103e38b88e9a2665d5320d
MD5 SHA1 SHA512

.rsrc/DIALOG/305

SHA256 2dc6ff2cd8e7807e32ede6e4d74e0b83296c44b9a62a6044489c047f00ee7e2e
MD5 066f467c1eba90999cee00b95e1cfe74
SHA1 b9c6b16f610dd2a36e05ba00f8922544cf020545
SHA512 102f02d56995d5934314d46756f6253be49e6806b4a4a9269f7b8841c9937a355b92043f277e0f2eac00ffcee796a84a64ab00f8dbe1e2bbca6b20f55d875b18
MD5 SHA1 SHA512

.rsrc/DIALOG/306

SHA256 973ee538a771ac62d19e4b490e258b7a9b6cb8581c358de89eae4240eba362af
MD5 a04321a007234ff238394f9107e3a7fa
SHA1 6d9e98e11a30a67faeb681fcb6cd5139a0e3301a
SHA512 28daefead858921229c3db3687b64e6f5968edbd80ab91e1ecd5f71ed3cf4612cfb3d58921cdc6dbe2fc6897ddd9e5da151a812070146bdf55822724fb4dd95f
MD5 SHA1 SHA512

.rsrc/DIALOG/311

SHA256 4677979c1665998318fcb65b9a0c0b3dd9204c12dbddbd5e76df8822ed6e347a
MD5 408a7443d8f432b28a248059d8669d1c
SHA1 c199828e8051a2825b1d5e216360eb57cd0b37f7
SHA512 fca4f9c004afc87753d832e904492b25b18b57f7c326653b6c805fb01aa09f1fcc730e81b1452f159856737fdfb35f5aa24364574603d4a16abc5eed84b1198a
MD5 SHA1 SHA512

.rsrc/DIALOG/405

SHA256 d7fab2b636722090bff4bbe9c9de54ad7d233f07e5dbb0682f9d4a16c52482a8
MD5 5e154cf659f07047d4c4f16fc369fb3d
SHA1 7ca8499004ef24ec4e3046d488f97be78094c729
SHA512 73761873a140f6dc130993d4b4536cccc6237bddc4402089f47525da4475abed48af0086d87525ae18458c0e4835d6c5c8637ab36ea5b6404d4025367f87997f
MD5 SHA1 SHA512

.rsrc/DIALOG/406

SHA256 4d22e887bee92b6f3b3c9d2b6339616b124d0d27affb782f4f6101c40c5e4cef
MD5 af06f911738022bc1cf2c45466539839
SHA1 a04ae2aaa93142f02d860456970e17dd9423a5cc
SHA512 4c5b87a8701bfd425c98e9f5410c608fcba4ee2dc2c1cbbb8c6b0575072bf3520b3a824e5e6ae3120698283a348172ed49f78ef416cc965e15f630e62086ce3b
MD5 SHA1 SHA512

.rsrc/DIALOG/411

SHA256 0fd40b240b9df8f2dece8947dabbebce898f12becca8e196136e4231efba2dc1
MD5 7ce8a17102daebb8d864cd1063e987d1
SHA1 072345a235d4947d36b53fd47da68e7e6a93fe62
SHA512 ef6bb3aed0c38614f30ea975538d5de640ac38ae3f99f8496fb6fceb98eaef9b6ff607d5cb36fc94ab12790b113216b332fa7f9449513aa8c6f8a334fa911e60
MD5 SHA1 SHA512

.rsrc/DIALOG/505

SHA256 eafdea02f44aa4fe01509c5acbd825ea9d32f543ed740a3b430af5506edfe8ba
MD5 1fb09711b9f44f21ce2a8419ecf84a25
SHA1 6db291c9b53edcedc43b1db0f9eb8f369b793492
SHA512 bbe256256153c1878bfc877b441280f169102d65d6dee32b89c02a85e59dcf597d6a15d8355f7ea91e714673f4cda2071c81ce99b497882e13c4ffd53bc02958
MD5 SHA1 SHA512

.rsrc/DIALOG/506

SHA256 c0442eb76f56bd0c3ebbe6a12735f25d5b3e5dc115955a2015f148f920201b0e
MD5 83fa7e736da24e0ee3373b5748a94a2c
SHA1 ced1bfe2881cd2a5ecc4343029f25a59bb832e5e
SHA512 0352e89d214edb73391c4f8c97feedebf8a56db58c1cadb46f5dc6369dc38d9439d8df195bc3383ed33b9ee3b11732564ba535dceb3dfcc143821e38c97208ca
MD5 SHA1 SHA512

.rsrc/DIALOG/511

SHA256 a10617b39293152a65ad5c91ca4f35135845c7b785e3a582e58f6c8229045b85
MD5 2497a44fff8b76b5129662b60a617c85
SHA1 f73bd7c9caa4c1f7a0e4840d69b0accdc6d167a0
SHA512 894e1d89007a8236dbf9042f6791143ab4c0502f914ab99304024adb73214cadbb253cc24fd6cf85e59b71de13237c855f991c60390a87760661d82c0fea1cb4
MD5 SHA1 SHA512

.rsrc/DIALOG/605

SHA256 d7fab2b636722090bff4bbe9c9de54ad7d233f07e5dbb0682f9d4a16c52482a8
MD5 5e154cf659f07047d4c4f16fc369fb3d
SHA1 7ca8499004ef24ec4e3046d488f97be78094c729
SHA512 73761873a140f6dc130993d4b4536cccc6237bddc4402089f47525da4475abed48af0086d87525ae18458c0e4835d6c5c8637ab36ea5b6404d4025367f87997f
MD5 SHA1 SHA512

.rsrc/DIALOG/606

SHA256 4d22e887bee92b6f3b3c9d2b6339616b124d0d27affb782f4f6101c40c5e4cef
MD5 af06f911738022bc1cf2c45466539839
SHA1 a04ae2aaa93142f02d860456970e17dd9423a5cc
SHA512 4c5b87a8701bfd425c98e9f5410c608fcba4ee2dc2c1cbbb8c6b0575072bf3520b3a824e5e6ae3120698283a348172ed49f78ef416cc965e15f630e62086ce3b
MD5 SHA1 SHA512

.rsrc/DIALOG/611

SHA256 0fd40b240b9df8f2dece8947dabbebce898f12becca8e196136e4231efba2dc1
MD5 7ce8a17102daebb8d864cd1063e987d1
SHA1 072345a235d4947d36b53fd47da68e7e6a93fe62
SHA512 ef6bb3aed0c38614f30ea975538d5de640ac38ae3f99f8496fb6fceb98eaef9b6ff607d5cb36fc94ab12790b113216b332fa7f9449513aa8c6f8a334fa911e60
MD5 SHA1 SHA512

.rsrc/DIALOG/705

SHA256 b875f2269bc8dbcfa838f128dee128139a1a502a973a901c4b9744f95e484f0d
MD5 0962f561d72e624bf867313c7fc404db
SHA1 245b421513690ef4132c46d9cb0b49d297253177
SHA512 d3ace415786011e50faa0aa03afd0e88bd243eef4566cf4af3c66b0a975821c57c016721541ded5104f1fcaff78d3de11467ca4a3add2e3b4cc026eb86726623
MD5 SHA1 SHA512

.rsrc/DIALOG/706

SHA256 18f1bb5dc04a12462e283723e5c3c9f378c91ef52964d0e5ed98a9edc7ed8d73
MD5 eeb488fca3bcb0afdc9c662fd59fe682
SHA1 2b569cdb3ae4196dfd8eae257f5862398ddc0e33
SHA512 d03718871b2a05399bce474ea2b25f71c7a6eb1b8e62c8242412e86807b36290af7b16bd434ca3565c970241f861e97b7577152884c621e848f6d9641d795ba5
MD5 SHA1 SHA512

.rsrc/DIALOG/711

SHA256 65fb71b054977a55435f45bbcddddedaa1e1cf43fdd9fc230938d625c3f7edcd
MD5 2802ee53bc08ac9a2cfaed81b3d79d05
SHA1 b7faac6a14545ea9c03651f69ae27cce0e62b010
SHA512 a0e35b51473d2f37674b631ca41724ab36a1eeeddc1adbe23c57f6841b7ab9ecab81308e92f5a53275fba90f399048b02ca9617d41352cb31b337e9e3c41f2a2
MD5 SHA1 SHA512

.rsrc/GROUP_ICON/103

SHA256 17225625efd7e9462b46763e91b7c2cf50945e82a76bec7e5f77c096974a9f51
MD5 d24f4c34afeb70ed99cc94cadcfd649c
SHA1 367eb9b168c4db2a5e7556e6db05c5e9ec3cf5fe
SHA512 bc7ab5a090d94c4b298d43d37e99e90a542e951a9f1e5bc3949e677a557c9824bc1c4ab2c8fa63868aa2dab67be4456e8daabaaee9bff678e59da284e35ba9d1
MD5 SHA1 SHA512

.rsrc/ICON/1.ico

SHA256 c6c3c8e8d7f2f94a7dedee735544f537cfa552d862463d8118b6293e2cd45183
MD5 e0811dce7646598affddc3477cfc4858
SHA1 8fda502320407b670ee16bdbd363fc196ee2a066
SHA512 3cff0fe0068b2ad18a3bec33fa391cb357f617fa2a4eed9a3346e837abe324cebce60e7b9daa5f9f72a1e2281573309781fc02464bf34487716f0f597cb385f4
SSDEEP 1536:wB3Zfcpn+1MVoyJPkbu1OK1OvR6EPOsmHfEXXknCYQWB1Z2SO1BkQ2y14BB/BqyO:w5GfqPh
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/2.ico

SHA256 ebfeb2a0ed7b6bd41ccd0b2efc410304afbcda37173233bac0cf81255d715641
MD5 57fff0df3a6796522ed834fa446acc34
SHA1 92d7263187e8bf37ab44fd64ec7639bac40cd11d
SHA512 6fd9d2d4dacec773159937d5e91a637f6b332f3796c9103b3d9b988f6c418ccb0555c4af97ba18149f3de786f62e668b9c67729927e6cf7b1a475669598bd235
SSDEEP 96:KjXbX7DDOXOSyXXXOX+N89rynAnWnbNz60xOQBwmwGnH0:WXbX7DDOXOSyXXXOXu89K3
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/3.ico

SHA256 964aed5d95c76387ed4ac4a81e0a0cee56c8d0cb1bceb7466746bb19bc57b57b
MD5 3b9381e23516707026f3c4e1809dfee0
SHA1 5c9918380d8be7ade74abf489af43949e0571cad
SHA512 9022271d373581602ec78332816d402902e8c60bcda41e449eaeccf8e53ff9141b093fec12b9898b04f88656eee77348d6b9b64831023ee34153894dfaa48d2b
SSDEEP 48:0r365AAK3hUsdDkCFTz8xbUCE3mlhZkq2bQ+746+uaDKZQ888888888888888888:HaUsHCx4VGrYbltj
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/4.ico

SHA256 bd5c24f0b6c2f35894a5024f92c68cc15b500aa9e92f6f6c3b6086db0d8222d7
MD5 643fa3134e40d8657476670b20cfa894
SHA1 3f3adae9af8a32d0e5a368e313a31ecb70ccc80a
SHA512 bd9b42f083b28cd059155eb5638009e6db9c7820b99bc147995a14dc32e75c4bbd519712c58a58a341c969429fa47efb5fb22f69b3c26dad45574dcd0d4b84d3
MD5 SHA1 SHA512

.rsrc/MANIFEST/1

SHA256 69800fa01e8c33933363ae2bec2e82da0faeb2f57450cd195494f5ef17cf6624
MD5 5def0c8b85a209b2efdcb13a679778e9
SHA1 b9810b175414d1d8a39c7c652d317f4570366e41
SHA512 081830600827c9d81309448de8c6f617993468035fa325bb89157c7e56524ced28e68f745108c2a1b0c1850bff54739d064047af70fa28b36ac25a6b519cede8
MD5 SHA1 SHA512

.rsrc/version.txt

SHA256 7c92eac16b6cc3d5fa68ddb8f038edc75677e966a6ec65f24dcd6cbf4cabd0d7
MD5 501adbfddb589d28e4d37f1f1ab00d00
SHA1 26b0b6fa37fa786808918c695db8a129eeb16e31
SHA512 af90d2413161f2dd2c6a2b2ae4d1eed2780f85a973298224617dcfbd21ddb2f96092ecd3a525e1502eee503c728a9aeb9371f55f0e3c2d04e8a5255c2d12c687
MD5 SHA1 SHA512

.text

SHA256 4215f7a3427cbb35aec849c0c92c07afe2f8b6604152aa3ea627cef62aa57430
MD5 5d5d9850017d216418432f314e112223
SHA1 d0b0e5f9b7d06aa3878c5905cdb218e3991441f9
SHA512 9416b8e8973da116c511ef81f80eaaa67bc2421d3e0cccc8933117f156ac0a6f85a8717c835bb0f9f84f247489b0f932b4180bbbbd765d377bf1ae07392b6314
SSDEEP 768:kJKOdm9o29rJYJ7jdQDDhzo0GBrZjduC1ZHQ0D3:0Tdm9B9lYJndYl7WrZRugHQ0D
MD5 SHA1 SHA512 SSDEEP

[0]

SHA256 5f0974d75b02d6c48a3780b66b1c7edb3e15e038973839b02d365dfe6f45d70d
MD5 f6350be4512e3b4adb2bd6238da06be7
SHA1 81629550dba05e1afe52d1a1e0b7161cbc28f72c
SHA512 9bc6d149d5c9aad404cf0cc12255a78fc2eb8e708c89532aa1f9a54cff9b63371dd373c6161c086fc5068f5978389d771420e58c5c3687e3bf9d19384f6c4bb2
SSDEEP 3072:90LJAc5uVZxlJP7131qOUkhW38rSxKaR5J7KJkcma0VkpOG/374vnriZ1nmTaK45:eTgORbEkcmYOG/37MnGZoeKxpuuQzo+
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer