44a934d775dac381e1418d83167d1bf2_JaffaCakes118

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/GinoPlayer.exe
unpack001/Interop.WMPLib.dll
unpack001/launcher.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 0726f655f3bda9c72afbb69a83aa530a7c1c4d742e8cc898ddc921797662c50b
MD5 44a934d775dac381e1418d83167d1bf2
SHA1 04050bc0b831fb2e43d0076b91b2df4fc74c79d4
SHA512 45cbcb2bb22b6640650360b60fa42b73be407f547aebeb67d0092d04a2ad5a406b3caa23c962fd6f7e84379b5021a71e7a1db0cc676f1f4c61a1f42bc8ef9034
SSDEEP 24576:Q51YKSdeF1dATT8lAbwO8RR0GLuuP4kSKraLaRgYmJRsQLW9Eze:SLLNAT6YE5yuPpSKraLCBmJRHL36
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ca:be:20:af:1c:0d:ee:a2:03:f8:a1:36:98:42:77:5f:98:2e:f4:93

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=JDX Tech\, LLC,O=JDX Tech\, LLC,L=Westland,ST=Michigan,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/MyBabylonTB.exe

IMPHASH 616f8a11d0ee76db2bc674f8299827e4
SHA256 a4b727bb1618decf1516f440974db01cef293272c096a81c5cf10f935bd847c7
MD5 6bc41ba846a2e42c0aeee31a994f969a
SHA1 ef414742749b388d4f6a3fd2bcf089125b23fa2c
SHA512 07a7d1c09d69227561df28b2423c8fbef5430fc2064ac760e9dbfca55698da66a363ad79bd6e6399ecf48f95b3db19237e35bad65c9d5ccf6e67866dcc4efa2f
SSDEEP 24576:5eYlVdeFg0QYKHlAkE182RJGLVuPdrS+7aheS:YiyrQYiBDnJuPFS+7aoS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

e2:62:13:73:76:e1:74:c4:8d:a2:b7:2f:12:22:a5:24:31:b7:ec:f6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Babylon Ltd.,O=Babylon Ltd.,L=Or-Yehuda,ST=Or-Yehuda,C=IL

Chains

Jan 24, 2012

Minor OS version

0

Major OS version

5

Entry point

5204

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\Babylon9\Release_Win32\Setup_Stub.pdb

$PLUGINSDIR/NSISdl.dll

IMPHASH 9cce555dd3ff1b6c7dc92d64c794c51a
SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
MD5 a5f8399a743ab7f9c88c645c35b1ebb5
SHA1 168f3c158913b0367bf79fa413357fbe97018191
SHA512 824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
SSDEEP 192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/logo_small.bmp

SHA256 ea45b6c6abba587a81d8a72136673da231ed946289eeb66ed5d9fdc831336e74
MD5 8d94e396d2897e083380d85a330fafb5
SHA1 f2f556e9459294fb5a3e232b2cb45bb2b42d598b
SHA512 94b8a3c6d9d43720bfac5cfa95b79ab99f521f3906e987c303fb2d51a60a2a11387f0128c3a3ad04dc51f5b1cc37b982bce537f880a4a89b59947f0912f6993a
SSDEEP 96:5hWIH2g1UrTFx3iEFuHaBr2R0Qlj9DRXeKMiXiYF6:5hWIl1UmEFu6BrD6zXeKMiXiq6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsDialogs.dll

IMPHASH 1e2884056e655f2b7bc5a904e352fc80
SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
MD5 c10e04dd4ad4277d5adc951bb331c777
SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/pic1.bmp

SHA256 a85f633bb786d4e6fa5845fe2091e0d87679cb6c56b45f136de0432709aaf51f
MD5 09d945dd845e79b56bf4e329280e23c3
SHA1 bacfc88e36642a3ca478ba1eb1aaa3cfdefa1ba9
SHA512 f88c822683f808fad189ee97530dcac1440046617ad216cfa1f43d6a3658627fde46b477c9f47612f3e720f966c718e045784ea441e297268068deeef0cf51b5
SSDEEP 96:qo5f8qxFJcr5RJCOcdY9lYYYrnB9LchPyrwBPEhMQUFIRzHGlleSJCNz09P:qW8qxF85RkOcy9mnWbhEe0zHGllsi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/tbpacks.bmp

SHA256 cd982bf81dabc8e3c0a08cab790a07f68fcdef4d6442c39775fe2031c71ac961
MD5 9f5122886643c40bbb69bc3ec17b5c93
SHA1 7fad84e4ce286ad2bacecd6b14a5d65e9158806b
SHA512 43733f12ec9665925c497da8a8a174d826e938ead45d90cdb492fdda83d7710be5851c426e008e8a54921d835997f585f6eda333350cd63021ae8af3a7ba49bc
SSDEEP 192:dA9Ewpqe0q2twZS4Ybuh0R/4zmIodQwXo:2eEee5C6n1
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/toolbar.bmp

SHA256 a85f633bb786d4e6fa5845fe2091e0d87679cb6c56b45f136de0432709aaf51f
MD5 09d945dd845e79b56bf4e329280e23c3
SHA1 bacfc88e36642a3ca478ba1eb1aaa3cfdefa1ba9
SHA512 f88c822683f808fad189ee97530dcac1440046617ad216cfa1f43d6a3658627fde46b477c9f47612f3e720f966c718e045784ea441e297268068deeef0cf51b5
SSDEEP 96:qo5f8qxFJcr5RJCOcdY9lYYYrnB9LchPyrwBPEhMQUFIRzHGlleSJCNz09P:qW8qxF85RkOcy9mnWbhEe0zHGllsi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

GinoPlayer.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 adaa7f79345fd7a4e2feb24e78cb307b19cdb53d1ae6f5bb69e5e4070352082e
MD5 c17a42c91abde6ded943329568210b91
SHA1 ab2e7babff3395c8820c13bd12a1ab543af5d5f1
SHA512 7aae0af7d21afd7d020bd302303b7fde2c1d07a3acd0d55cf30a3d211aaaf8d34853f2c55c054bebbfa7b2590a67d857701015cde340ae96cc32b2c2d78028be
SSDEEP 3072:JX3hhg694tjSg694tdHoPRR4PKmxsFTiwQDsPeCQB1+PgQgqm3/VVg694t8:k5+PX4SDQzCQB1h6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

200014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Interop.WMPLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5d36a9c572a309d3cc632ac8c7a1e4ea6fc3969b31dc6d1a9284dea44a213d80
MD5 d92527eaf9868a78a3153242d3b6098d
SHA1 0a63e538fededd292e05364d62dfeab278eac413
SHA512 27422787764863547331144a26fdb233f859a98c5fe15e1b1dcffa9c295da1535ca049e980e4a29d6068cd0fa54f947bfbda76e851c524a711611d6949d5a3ea
SSDEEP 6144:UMfmxYbidUn+MCdW85I6hI3uFc7y5g/md0Dqx4HeVMriJQPWtkzaBoXOl8bSZAfl:UMfmxYbidUn+MCdW85I6hI3uFc7y5g/j
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

285998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Uninstall.exe.nsis

SHA256 e2fbfab30bcfe3760811753d05aeb2363e8407297f073774ce05e3fee216e790
MD5 04be88f52513116f27771f7ae0dae4cf
SHA1 810a17b7b2da1306980407c6b6b851cef01ec222
SHA512 57de6f00aa3de5a3d0d13c857475eb85522c2cf9f75a900f07795ed7024bc1bc95ddb3e33946b5cbfdf8f65d58287ad6461f6bf64cc52495e5ade591da5026f4
SSDEEP 384:h0P9MIrtJhqYuVbPcgxIzq2dnxa0/O39ma7/Kr/WpNXELhC5N2a1gEiDxLkp/lrI:o9MpVkqIzq2ba0LaLy8XF3pm0p/xh6z
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

launcher.exe

IMPHASH a7aec9c88e96b4c7d04dacfc8ad9e982
SHA256 9b42586c3f62d7a402ee834d9dd471a6a009dde9eaf7779aaacc73a29ba00a72
MD5 57ee4bf53a3fc949e381b8a0f826f9c0
SHA1 ebe9dea146ec22dc4f6e2bd19fe89762c976f129
SHA512 f1d884503dfbf288d6985f2bfb34002ec85f5ef90f0d23eed9e6e93f42f3f0bb7c7d4034d971f1c8470b7f6939a90e024a5e700d137aeebf5bc1a08244f3b652
SSDEEP 384:V74kkwFjPPnnEK40S1KehwhDaDBWyhLH8G:1jkL1OqzGG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 ord517 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaExitProc ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaBoolVarNull _CIsin ord632 ord525 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq DllFunctionCall ord670 __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaNew ord600 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaStrVarVal __vbaUbound __vbaStopExe _CIlog __vbaErrorOverflow __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 ord579 __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaVarAdd __vbaStrToAnsi ord616 ord617 _CIatan __vbaStrMove ord619 _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj

uninstall.ico

SHA256 5f5bae653fd5a00b6baf38a4eab2b2a0412c1932fa533570cd233d01437bf7bf
MD5 62a385296a57632959a5abac36369b60
SHA1 4b4ae8c9d5db39bdf2d76412f8f4ca9f53a390c7
SHA512 4b9d7c0e98f07d0f2e408a6a57d61b8532458edd86c2ba6c9024110609c32387d1c403429a00c3a12043931bc8c0f5a3795f8f1bff24001e118579ab9d475d0d
MD5 SHA1 SHA512

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer