66f138849b45ba75c5e99484739c990056387b676eeadf66e32f1f27dd6b9c6d

resource
66f138849b45ba75c5e99484739c990056387b676eeadf66e32f1f27dd6b9c6d

IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
SHA256 66f138849b45ba75c5e99484739c990056387b676eeadf66e32f1f27dd6b9c6d
MD5 e4fbe0286a7802d4a7cd91a3d55d9f3c
SHA1 320869f193d91388ae4c2337a91d7545ca0a201a
SHA512 36acfe26eded83721d7d35d9441342ea8e6a61da20ded05493e4cf9a88995ad52dedbd81229f3d31f670adf058b3e1696e8359af60e59dca8db847cd54daad9b
SSDEEP 24576:GbTeCswwSe/fDyBvSGy45nJtYsf8J7f7VvgWncL3f5llrINn9Ra7I7:8vdwH/LyBvg+JKsf8JzFgWcDf5m9M7m
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13613

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$INTERNET_CACHE/Documentcreatetextnode

SHA256 48c659b35aa7ca443ddebe96c1b8d5f5527b5a7fee965d9bd89d5a37e5898005
MD5 d69760b152bfa02a204037910a82af49
SHA1 eeaf6fc3c34d38acaa84f2f352401a750d434358
SHA512 11e5581ce53007231f04229965cf6c2b7eab159737f7a42e65684a5255e1e2dc29865a259253077b892c2fc48cc597a936404b2672cbc59e6d457ede213bcaab
SSDEEP 3072:i5Vbx2b2SjxbAJyKf5DFGXsLHCe7s1yKTaQtzmbX:ibY2es95DFG8L8MKTaZbX
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Eminem

SHA256 8fbae4a3b2128397534b035fd010967ebe3ecb67403324e782e2781529df946d
MD5 596b8ecdbc8e0f011dfe85af7411dd18
SHA1 89b67e0cade851dbc83b67dccda250d80215dbf2
SHA512 5d78918719d70e9699010dfb01fb5f145b9460672dc05e51414ca4b53eff42fbcf1bc642a42a2cf27cbf7b7e4eb57935418cf44ea96b9096b15f54e80b151dbb
SSDEEP 384:Laei6QzJ17iehorFzz4ep4r3ecejLC3x1tMfPM8U6awhLVrgB:L1Q37iehoxQeU3ecejLixwgB
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Fly

SHA256 d6e76247b9145e33387ce0aef49a6540f74c3e86934b86df3801005bd50acec3
MD5 fa7db9b5000c991b67a79b15fda39aba
SHA1 617cdbccc0579f79405022127506a446b9210ab2
SHA512 5ec668d0b93922a835c90077f64939882973973088c9a6559260f233d49d2fd0e90149ec80d1e2870d3fd2dbc5d802cc5c584eb302f6f2d0460592e76bae45b3
SSDEEP 6144:0lcBgtoTqnvAfcaG9b2M8JTDD/xcq21R1p/rAOPOei1:0lcqikvAfcN9b2MyZa31troh
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Interstate

SHA256 a357856aca612a451706906b80059d4849165191f476b1e6d6cab94443a71aa7
MD5 4d12a68c93c9c812e5d773f34cc0f34c
SHA1 82c4417cdab26c51ab504a5575cb830a72cb4109
SHA512 66df8f2b58e75587478fec5c281f04c28e0af0e0a4bd4343296131dfcce0948a863d305b9a0b0a584d102a74312a9c5c9a491a9e16c1ef7d4e4e13fb9ba09873
SSDEEP 1536:6MxV+42uYkqf129Zlw+8ghjgvbnWPFLMVl0JgFVc5D0vt0IF7FvGrlvOGRZhlUIV:Yp6Jnm1xTxXoD9x0aaj5CnzWygpJZC
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Invite

SHA256 1397f24c2a9f41208024a1fd6ee11d825b780626b606fb2f32998443c7be415e
MD5 85b7677a3b8f96b14664013d215b806b
SHA1 29690789d7e3a4b577809d728a7fb0a7b794b03c
SHA512 2438ef98e33d004474f32134b921482c46e2d8f73362699c3e28a718d82c04f37abac41ef5a106b0c94167257922542d0eece0b0a264fb981148f26a35410622
SSDEEP 768:it1sd3EGoSmNpLQEGBoAyGcjXB2SCursGHv7mlHW7nIhp/lNVi6dFiwc/RGNul10:995LmNpRGDox2S3hPt8gNpkU5uG3xYwA
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Legislative

SHA256 88761cfbe7839c89939ac085f8b3b2dbf563e79e041173255130d63340be28c3
MD5 7835e82b306158158296241ae8c9bcc8
SHA1 c833574a2b85a363088cf3a154297381ed399262
SHA512 8ab937a07ebce76e36899c1c124c09c52920fb75d59b417937545013bde256f3c108432bc594ea8e682d45aa78d041c5c0d531e975d2542c53f8256164d65cc9
SSDEEP 768:RIcnJs3itMeNZg34xAeLuFxEZ2XjaB7Z8Y9Rmh8nJJE6FR:ucJf1w3CkEwzt8nJJE6FR
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Life

SHA256 ff2e1c3901a0f928bc18302c2f138866f183e6ebea4118cd254723d2addb3bfd
MD5 9730be7ca992763ce7e46a31bf891f9d
SHA1 7653922a59ff43a09a2df8f0d4be3e959923c7cc
SHA512 9602339d3b56019ce98224c2a03730c58b94f8f85d30b3ce05249ae45b0efb3fefa4c9cfbf5978d445cbaf01a364bd9c2beaabfff062e220dfe1efb1d1b89143
MD5 SHA1 SHA512

$INTERNET_CACHE/Lifestyle

SHA256 b1f1d6dec9e24797161d8159fe78b1e2664431904c7de6c39bfa3043bdc192ff
MD5 d11334e857587fed4083f21f1aad0832
SHA1 5a14a3b025c4b88914a85b731503d674328ea494
SHA512 c347d4daeb23ae3068ab0ff441483fe5ca2b6cb7abe6d0e1dc21706c35e0cc4fa94f0c89177af575dfd257ba7d59ab4586c9425202dd2eb67974204f6adfc19a
SSDEEP 3072:nnyy9NexI+UA7897Cy8Hd6ZhTrtQg8PvqrtqNlvWWW1v:X90xtUA4UCprtQgUvM
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Lit

SHA256 f45ce9898b27b528deb4797dbc360dbd61abf0bc6706909bea1aaf7bc6ceb5b3
MD5 4b67a1dce52ac959384f18d92d4cea33
SHA1 71741326e1d30f80bc4d93df83678e8137695e8d
SHA512 fb45144ccf35ea68fd258ae14591502922e8046db12d22692a00e46c61cfe80c77e5fb63d1d1062dd9081928055797e6a98d042ae7f4367a2b832729f6346a15
SSDEEP 1536:Wsu0nMOKzlvlao/RIs2ziQD2tR/i0027EM/awuUW:BDKJtIs8di/37EM/jS
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Protect

SHA256 9b4e34f7125ef28f7aa04cdfb88359fbcad7b6657b88ab17d8bcf2a059c6bd4c
MD5 2992415204f328038c186bdb7ba5ae86
SHA1 fb0dc067051315a81ec9f60a180e60c6f543cb26
SHA512 d1884ea3ebade1dbfd22392c78b7ddb23b183df181e5f8383845c7ffd046f64be581a125ee8372424ca9fbf27fd36d1055fd4e0f3944b901831d14f02cb64885
SSDEEP 384:UwqpSwuzK4A5Ojs3h4ZPwsR/cXGE9+uzD:Uwqp9sK1xhNGE0w
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Record

SHA256 6c0efe34e2d39f7132d9771ccb264f8e04658a3be47b20884a372fe6cba0e1c0
MD5 2a397d51da3949fe228dbd3438233a29
SHA1 0f5e7aabffdcee7069243ae0837fe591e20b4752
SHA512 b33338bf8b4e9aa171987776dcd199b4420742fadd8dd4cda10f9a38a40c44166c48f1fdc21ee6dbab70f24f566eb1f12fc4604b1c96785f2fc4544dbe5f63f1
SSDEEP 3072:UpVIa0/vidXqGjLPQ6ClAMfA4lelIJBSLPNGR5yiY:U/12vk6AQzyMfA+eyVY
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Rome

SHA256 06fdf3480808187764fe12263003716492d7ab5d01671c290be3bdd1b56efb26
MD5 bb5aaeb374f59a4203c2f6d11502978c
SHA1 07801c312468601289eb0b3c1dc2993ce910c0eb
SHA512 1c0c496d59eb2c990e9320f196c5dee0c0db97409ddad3f522da0e483cd9865efe0e76f3f21419d1c3ca8d457f7c6bf1c4c2d066642029920f2cd8108b8b6891
SSDEEP 768:IRH7ACViIeTxYEhqHGnqA1sojvqt0hDthFb0GuCsuYCV5mhzw4NKCFOsQW+Bfm4n:I6CV21YEsmnq7Cv/+/Coc5m+4Xf8O46W
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Southampton

SHA256 f1c45d16156c7ee2db1082b1c0f4a092ba23dcf6a021ebe3ccea7d9e9494358a
MD5 f87c8703ee712dc6ef0aaa968ea2eaae
SHA1 a4aef7e9f12e96e475cdad4c0e23e77e30fe7c60
SHA512 d4eee768fe4e89f23b023d487fb522f0ed85e23970615e7169b88fce1c93670f6b3cac0f08dad9d15e6604858c4d25fd211b0eb96f002f73c064fee830455cde
SSDEEP 3072:EGXEyaAt7P+6i/xhgariwYLTNaWy4ZNoBVxjCPjojv:pTdFW6wgarnYNhBZ2BV8jojv
MD5 SHA1 SHA512 SSDEEP

$INTERNET_CACHE/Would

SHA256 0915f627a18a4bf6b142829d81d1d013a98ccd27f9b16b33967bb0a5b0cc39b8
MD5 c0a4f917f959c0099ff4341a6f9178e4
SHA1 50b15915c04f02ad905d7fc3faefad4899e3eb74
SHA512 575d03749b42ea2deeff55d5c383696b69a1b6280e3e62e08ed41be130446b052a4daa0a3f4b1e2f2bb751e58a3f82d75d61d89b10165c7b540c5a60855f4d72
SSDEEP 6144:y8U0E0T0vGXObLxrBJeZzzZ6RMGlulw/SeXnfcfkfoQ05:y8U0E0T0vE6xrBJeZzzgx/SXQ05
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer