65ccf2a8a9c90629015cc3b004347fd7_JaffaCakes118

resource
65ccf2a8a9c90629015cc3b004347fd7_JaffaCakes118
unpack001/$PLUGINSDIR/CustomLicense.dll
unpack001/$PLUGINSDIR/DualStub.exe
unpack001/$PLUGINSDIR/FindProcDLL.dll
unpack001/$PLUGINSDIR/GetVersion.dll
unpack001/$PLUGINSDIR/Math.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UserInfo.dll
unpack001/$PLUGINSDIR/intlib.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsisdt.dll
unpack001/$PLUGINSDIR/registry.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$PLUGINSDIR/DualStub.exe	nsis_installer_2

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 62cbf2d58202233b544c6c3ae0fdd5e48245e711de3a4ea1de95879d1b268d1b
MD5 65ccf2a8a9c90629015cc3b004347fd7
SHA1 8816556fd518855b0ea5a648b73cf09a25da395f
SHA512 911ca934b6d22114583c51f842923fe8143b04e71d6b72a091a77f4f25312e1b89bcffd81f9baf3d9ab27e845d127514144cf4c7133533bdba1e77ab3e54f999
SSDEEP 12288:j6xrN2HuZybubDbQpJDGQDUN1g38xNsZZH2JsRgFKHyK2q5:j6xQ2n+Dq5sZN9HyK2q5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/CustomLicense.dll

IMPHASH 0d87660e15e4e2499d63742f6c9630fd
SHA256 bbcab5c7e9f4b3f63184b23995e5b335a1c6ca5108aaa1be0eaf3fbf78afc1c4
MD5 ca37f2747e04ae09ae9f14852574abef
SHA1 e40bf34907337340520f368575c848ddb62f98c5
SHA512 ea781e646313bc458fba0ce66e357818725f385cb6c3383bb9c41dbb5221a6f43e3d8296aa3cbd5e8759d95d87a8eefa5f87665912fbc65c8eb4efcacabfdb60
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4679

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/DefaultTab_license.rtf

SHA256 f2c89065a00e08202756cb383d3092b685dcec2075314f494df71bf8ec01fd11
MD5 b97839b3cfe1f7e62ef09d5a2815ed81
SHA1 e569ba28d4a88a6e23551b96b3cec0e710b99487
SHA512 227a2a1b5322dd183ca7463aec8613447b8670e97011e26286d2718571ca76a6206493aee2bb3c747bdd28892ee9820e3da58e3e69e0d42051e26b112aabc221
SSDEEP 384:ZrPL4Pgxpgc7u2ucXCN6CCnNA9NDrclFyLkH4A2:9Og3gwu2u3N6CCnNAfAjHS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/DualStub.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 be5dddb035665640720edd1db75d627d5cd3ecd9f1fec4dc2d0e2391c90a25c4
MD5 4393a444eb29c421ea3744f17dbf1c33
SHA1 1253a57c33276b3b0532de7f2ea3b0bf3f9bfcbb
SHA512 f776437e408cf1bee197ed83f6350be0636c96ebe78f73c603c74bcb5907faa59148c70cb7f134df3221324d12d7aa2b2f908d56ceb0704c835c8b0f09aa12f1
SSDEEP 1536:GpgpHzb9dZVX9fHMvG0D3XJB2/pku9rjd1V/DOSUvKIO:sgXdZt9P6D3XJukuNhDmvKX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/FindProcDLL.dll

IMPHASH 8df26927f8978d4eb40ff179c0aa961b
SHA256 0fa04f06a6de18d316832086891e9c23ae606d7784d5d5676385839b21ca2758
MD5 8614c450637267afacad1645e23ba24a
SHA1 e7b7b09b5bbc13e910aa36316d9cc5fc5d4dcdc2
SHA512 af46cd679097584ff9a1d894a729b6397f4b3af17dff3e6f07bef257bc7e48ffa341d82daf298616cd5df1450fc5ab7435cacb70f27302b6db193f01a9f8391b
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/GetVersion.dll

IMPHASH 5e41893d1528e7648e03f81030aca366
SHA256 7d76c7dd8f7cd5a87e0118dacb434db3971a049501e22a5f4b947154621ab3d4
MD5 5264f7d6d89d1dc04955cfb391798446
SHA1 211d8d3e7c2b2f57f54a11cb8bc4fa536df08acc
SHA512 80d27ee2f87e2822bd5c8c55cc3d1e49beebb86d8557c92b52b7cbea9f27882d80e59eefa25e414eecee268a9a6193b6b50b748de33c778b007cde24ef8bcfb7
SSDEEP 96:E12Z84uiwpGTVTDSpaHYfniz0R3GhCvXY6Ix5vdR7pBi46AQ5Vu4:2STVTGwYhR3GhCvy5vH7pBi46AQ5Vu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4662

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Math.dll

IMPHASH c1eddc2d743572429fa0b1a79b7ac0fe
SHA256 0598f7d83db44929b7170c1285457b52b4281185f63ced102e709bf065f10d67
MD5 b140459077c7c39be4bef249c2f84535
SHA1 c56498241c2ddafb01961596da16d08d1b11cd35
SHA512 fbcb19a951d96a216d73b6b3e005338bbb6e11332c6cc8c3f179ccd420b4db0e5682dc4245bd120dcb67bc70960eab368e74c68c7c165a485a12a7d0d8a00328
SSDEEP 1536:0P43WZ4Ql60gam+2MwRmPeqFVHbQH0ZZ1Iet:0wU609VMH0T/t
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

17950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH afa8e526425f3585465337467d0b5909
SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
MD5 7579ade7ae1747a31960a228ce02e666
SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/frg_license.rtf

SHA256 5101a990a7d78e415958a8e803fae4b4a1de3601d9fb37dbb55f85e0644a85a3
MD5 7be0f88cc380caaf3efc805e14eb3c9b
SHA1 28cfb260e938a81bd4eada0099e397ec83f2e619
SHA512 a307c461dbb171f88972e2220a07f307a1f006f00a0369a935fb33c9af4d4cef62cc2e05ec9a9d84376778556ed201d10884319fbf9b35581bce71cbbf771c4c
SSDEEP 768:GH6OyQAoYRJQQA5Vq7MYQQA5VqKMPQQA5Vq7MPQQA5VqUMPQQA5VqT81O3idRfOE:SpsxIUhd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/gc_license.rtf

SHA256 cd47392546a0b63061e33a431debd341f21755d794b59d14b6272ae895725db3
MD5 5190bd8d892384b72d0a7f5eb4364eb0
SHA1 4960e2af31f9dc90f6c8f864b8fb865150e76e97
SHA512 718bd94078f78f074d6dee299aadd12041e1b7cee9a51aa8ce320477845d627259da76239ac1f10a87dd90135c1a9c83f65ddd6dc1eac4d18ef210a3cd2b6295
SSDEEP 384:PMxEXYxvXulMRXk///JGGl/q7yJQCTLDJTLSjYC12xx:VXYx2lW0/3JGGl/q76QCTPJTWYC12xx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image.bmp

SHA256 d5119b140dcb3e62e96bece40ed37c25d81bb6ce9451f65f43ef48e60b3684d7
MD5 586e950fc88a665ed5f060c5bafecda8
SHA1 d2fb8f985601355cfc4aefef128983aa37222d6c
SHA512 ec0e96953824a1c3deca09d306c390d87aad959b065e45fbc66cbe474632f804dd81780c33025ab2e99e628cf08ef73add4549f5b771910be2e9d27466ef70c9
SSDEEP 384:EeNooooooEoooooChtiqMdt49Pd6vjoftm4Jeq3fG3cKtTHIpupW7xlAuTK9+6xK:xAhkXdt49FMuhMqqcKtTultKE6xCR3rx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image13.bmp

SHA256 5d16fa73b12908426709812f959b6757c1e0127db86432624cdbccb94a52c0d6
MD5 ac179bcf66eedc912398ce41091e0fbe
SHA1 491bd042955fe92e18451cb0d8f2bfa9300c6064
SHA512 88fad6d783f9aeab07ee9c9b1ce3b30d3a20528c70ca3d5bd03a0ad0cb3b41ec64aeb2093aafd78ca80364f7668454ed201c7722903ca9167d2d1a01e69f447a
SSDEEP 48:w36p1EwKyDHoDqnSaIU5p7ukmMrfsWgDQiFr8yXDu4H:wKUwKlWV7zfuDoe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image14.bmp

SHA256 d27129da6d819b472961875d110ae71763ddba988d9d7ca40ecfeca15645b5cb
MD5 cd599b1cd17ef79b4af208bfb50d46bb
SHA1 89cfb1352b26b4687f45245ab078c38d3ed3292e
SHA512 7d4671ba438af4389d045368f843a4841d106aac61efbdcecfa64c521462ecbc325679d36dbad9f34f33906dd7c48675b0a1357ab4b3e02bc843e5570291b599
SSDEEP 192:fhr9NEJ7tKknWRG26/Ox+RGvyn1VHpeRRm+3PF4ccR6c9XtWU/atG:f2LK0D2R0Gvyn1VJ0fQRd9Es
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image15.bmp

SHA256 e5047880e469e114d7a537972e90602511cdb16520160c312923578fe1df4ac7
MD5 f5296d39247a0ff320b0f2191bde69a6
SHA1 1a617efdeed5f276b13825bf7acea9c73b60cc73
SHA512 14507bf4481b47d1c1f30855296f90613de34573c9f3071973ebb1d661cb14afd16592de54ae731a29850c8485fe12091a5f662e00c41ee0f6c8ec06a9f37e80
SSDEEP 384:blKb6TgMCx+hdmqLw9MtfCKZaCn7+m7rHVKfrdeWwwBaem6dt5szrR7PxGvSkkr:JKb6K4hdaMtZb7rSBBae5TsH5PCSr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image17.bmp

SHA256 ccf94c82f0c59bc807ba730f9b9e2a2abaf9f1939b689e566b6ec647ffa8b4e6
MD5 989bef37e4b41563961cd7015d617e62
SHA1 d862c077bc473148dd6311c04301b2e23639f2c4
SHA512 88cf1b703309e7c01896ca4f6eb80e0d3fdece7d22de6d5a3621c3f9e9609548963e06c5fc0c0fd86d144cd81a44378a62e90ff3cd236f78ae8fec6ec5b7a6f6
SSDEEP 192:RsYNij2l6YY1OxiWvPqq4A6wOePSyXz/DQCbZ3jTh7dPs:2YNKs0OxiuP/4A6JUrbDQCbZJ7dPs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image18.bmp

SHA256 63d87c95bcad3f6a8cb66068e083eff531efefb1371d1a21eff6ce2f1082ab57
MD5 5a1036a3d7ba24d6e17087ab038581a0
SHA1 aeb5b7629aeed570b026cafa883569ce24a4c123
SHA512 5f41d7cafe64fc80cd6972fd5947d73dd1cc66fa9db7f4ef0bac635c203b9e83a5eaa1c54e030f5e6d11bf632449c0e9542755e0aa8ad2125c6678f90d9023b2
SSDEEP 96:HuWsZa/RK3swS5QTnczj/ntoSBRXytyYa:HuWsZa/RK3iuTcnlZXEyYa
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image19.bmp

SHA256 19c5ba66a5d0cc7271306a9047bef21d22a9417c048094b4a04188a3be7212e6
MD5 9c9fe8e640696f23a5d0802e1e4b9f26
SHA1 b8da1b817cbca51deb414e3ca1224117cc1c9db3
SHA512 3cc25f18bbe437c2df347de48bdd4741b240dbce5ccc5cb12ebdd6266ce33772e8b6828c945822c9f905f6741d684c09fef6b76ea0da881890f20f25fc8f772c
SSDEEP 192:er5n0d5FMW+N/Ty2KMEC0zzQc6sLoKdIcAIV4ohKXCjoj6JJ52m28twRh8xpa:akz7OO2KMt036sLNdIoSQMY46D5X3w3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image2.bmp

SHA256 ed25fbdee1e85e8517b460329ce33cfe25c7eb944a6191b7b31c05bb0b0cd350
MD5 bcae7c9348509112e9e8b38c822179c4
SHA1 0515cac7940e20c9abe22ff4b51375eed79f7ee6
SHA512 99f288ad56d95ff051293fc8a1d4594b0eb806003d064bcbb68e26ef25a506719a01eea2d9faa91551e976f39b8245a9bf000f5af8380e9a01a9283d1f83e370
SSDEEP 96:/qStzMd5mipsCpIzrfASgzgxmL6pb417LmoePnckMXlI1CEiFH0i:/dBKO/uQV+eP7MXG1CD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image21.bmp

SHA256 33180e7ed4a217f7a91865d8e1bb244830225fd14f5f60e34c4b10a4fd9b8875
MD5 6f9cbbe916e67bdb6bab59249827b666
SHA1 1bc4adcfd0e50908b2942cee8743695fc6e75266
SHA512 6c4a5820394b52428c68a76624801bdfb3c7610225e20ec98058c0b89f44d6886cfb9fc6b7877ef67d709b10f80ac5a70f609e30be6d224f24108a5c26414742
SSDEEP 96:bASEBSsny0DAmwfiNr7dnrmzjTcRrK2j2q4XbEmwJRQy949pZd7EaD2AwZnLDCNd:bASEBHJMmwfi3ITcRrTjwCvM6aCAwRSd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image22.bmp

SHA256 ed1108bf2be5ce3d3caefaf38b2b1a8e1da7e92dfaf1e9dcfe9f15515906cee9
MD5 e00e34904390b568acbb5fd30b1d49c1
SHA1 324d8482ed1bb20aea7a10bbb7a06f981a2d2911
SHA512 f85dc198a972a63979e2906c6de68eecd99133b23faf5f5256a1a092152fd97809d3f5baa7fd64407231c5e8d69d213222624632b19e7aea08a70f9b98d6ffd2
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/image23.bmp

SHA256 af375e6d20929fe41581e99321ac0ce4882fa2e064d88b44ec839e938ac93991
MD5 3852b1f2701529e38ae21a2bbc9485c3
SHA1 44ee45258f948432661b9821fe04ff557d75e8f7
SHA512 563ca81e26dadba078d27c5e1d0790191497d214b8e8d4bd9431d3f988029ef760fe2bbd8179802ebe43dd53d65269be8a8e8b633e082733f2077b8d8b07efc4
SSDEEP 96:GGcltotVMNhZZTYVoWnnXF99MTRutoiMd/xSNGukHHHkl9HHZHL9iPtLJsumnK2o:7cltEVwHRSl7xMBxsDjutV9OJ/7c
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image24.bmp

SHA256 ebb9ecd75353e9fd85b2978004cb021bd7b2af0a0a3b3e6671616ff46fab9ead
MD5 da84975d129644f6defb1abed2f9c410
SHA1 3c21b111115c6fbe498fddd4d9b98702a32b7e31
SHA512 32757acd1f0c50b57f8b184d858d3ede175264e0af93f737ccdd045d0e6e907a73a427060a4bc60b592a4b2ff1b5c70b2da9dc6a6b9ef517df432d9cf4babbf1
SSDEEP 96:Y9IiJxFKQM3m+xXHuo+J68bAULgZd4DHJR9cdN:YLJxkl2WHMMUhVR6z
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image26.bmp

SHA256 67579fbc8cfb5e012078ff28607ae10e54ad26116be89acfb585e21542e84432
MD5 4918204e320a6db08c0ef80eadd61195
SHA1 72432ff2cf1d51fbbbe612dd6dac17957ea54c17
SHA512 780aa04dc5fb1c277760643577b37a51e49258f1327ff5c5775d19cd37130a911ec9da7c96a53a568a1c941e807aff1bbca35136c4e8ac5d4238a9c7fa817f25
SSDEEP 96:mUiApQahAmzui5CgoF+AbS0M1ZPl9pLr2n0BGkkSOfauUp9fPYkN+GcbGd+AoRAM:mwPyT51jM1ZdFKrUphFNpFU/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image28.bmp

SHA256 bfc1aec092484a33bfd07bf86861bb1bb83b936b6b68cb1495e3e45934b38a1f
MD5 94352876255ab63af65c5be53065000e
SHA1 a7b7da23e7e406a83a22edc928f4d8614135fa69
SHA512 a0717a4f866dcdf822bbbcd11b1feaf3fffa0534a556fc54eb892eb9e876f3bca2b3304bf69d0341bb85f39c23e64f12296c2920b77f529061a702cbaedf7e4e
SSDEEP 768:DGDaWHssARlt4Z0QFPDFAln15yp5pJB4PX:KDBB1NFPDF+PX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image29.bmp

SHA256 363f573d4716bc7c8f06534db4195c7bab205436ddbfbbc346f5915d2013964a
MD5 1a8e2704268f5199fa666b06fce2da88
SHA1 c2715763d1743d1619cbb03a4ddfa33d211d6d6c
SHA512 79935bfba241d4f594e7d84d765bd8f6171ee5a6073cc74c06b4e18aedaa976906a356633fb4d98a03713a060722e78cd6a2b79f26271598fd1252deccf52805
SSDEEP 96:MSRm0nTyV6XE3pBDN9V/qcK80F01ILOpyDFaWzPDSJzxqqF:MSFTeZBDN9hqcQBLNa8ShxqqF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image30.bmp

SHA256 e0e3280e1938a36c138a6743a2c103f84587a0c640c2ebbb9a4bb59dc8787c4d
MD5 f5fba062aafaf0072f024e0cc82a27db
SHA1 4a3868a9529b891c5afaa7b0855841e387e2a88a
SHA512 0ac3085ffec362ff0da968549d11b02f8765de6521fc5412b176c4a0bf5c4ab42082435530cd0217465e7f12029b254ef6fa713f7a0acb00af922bc1bd1350ab
SSDEEP 192:txrUMBT6DWdQjzYZ2lftNnK/Ay8o6t1E8otlnWudpmmMHKvlggIs:txgMBmc0zuaLKovzXytVWupmpqmgR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image31.bmp

SHA256 27e256f969fa292fdd4ecaddd89d47ea7dd7f003f77418fb135a416ddab675b8
MD5 9f46fed04130f85e5c486402d35e2aef
SHA1 6c746777afc8ab27cf2d88bdd9c1efa774fdbe5c
SHA512 5820d10e4dc9f2840c48c48835f64f710bbf1f25a23c5a93d9ebe7a9239ac7bbb7769580ec12b69fd8523c9d0064a8420aa27a36cddabd3708fa8deea0307bef
SSDEEP 96:bsm27NI5T66J3M2BnBSI8rcWMJNRnS+QIb31qW:bsmv5+e3MAnBSyWM7gRW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image32.bmp

SHA256 4c45101824ea0cccf4757c1dbdd7ce65949a1310b8bd727ed2eb0a152c7221fb
MD5 075744310c94539d452eec676d422f6c
SHA1 acf9070b992143b5aac92aa8b16b8417648c84b9
SHA512 8fa13395f4637dd82978e4835cd046e145934806300f732f5726fb7197d09b004540ef75c9da1c34fc0741c6328efc13b6da3b4ed98897dcf36f89920bef5280
SSDEEP 192:s4kBr67WdljG+fFv/Ay4TG+NAUY4ULKtFgcq:s4kB+kpG+JoLTG0AUY4kKtFgv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image33.bmp

SHA256 69e99209a3ca21035a866a8fb6565ce891e64d15f1c6adfa3fd96dff8135bd61
MD5 c7a4848bc2a9d047f6c984086d514884
SHA1 4b12d01a4ce6ea9529de271fab36c0dc06e894f0
SHA512 a2a292cde213e43e801df2b6676623921211635d0efabbb33f1979d6f72ef1f175f55e683f88fd3db74180d8c9b71f153993321f4e29d8b066799d8947d79095
SSDEEP 1536:MSugIw+NGto2xwo/OF1xzDetrYKAHHBRUN79+c0HKHwMAmwD8p0E4XdaNngZLGQL:MbfR+9OTx6eHYN2HkwMhwNfadQvPB1
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image35.bmp

SHA256 1da521581714bb70c79b889cd3f628f8865a5d31c1d499e3ed00f384514c665a
MD5 1c62cf607b272b7dc82cd04c326910e5
SHA1 a84cf05680c0f12a3a9b5ad281201a1e5defed8a
SHA512 44d660da1a96bbee48493b880cc23206cecd9baa3d5f364a69895ca5293e667c12df3470adad6c52bfacdb3057f1218d76056789ea5d7c3302e8eb5ee1c928cb
SSDEEP 96:GR5ZZZcQ3IcYMjEXQlMr2xAm7VD1EBEDbsGhlAQ:GR5nmQ3K05pEE/thN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image36.bmp

SHA256 843c76a9652d414a33b4ca14d841d41871b27b63a0e26d2a5a9b71f4d73f4145
MD5 ff962dbcd7714c167d520134b942ba5b
SHA1 34fa230554d142022c41bfec548f513e5bff0b30
SHA512 b0a55706d0243f3f9c7e18ab88188ddf0a17c9e104f4bfb6d484b56eb146c21959bfdcbd8aca191daef9093f9294f85bf01b68653ad83f1ae7ddec76c03ff537
SSDEEP 384:wDZ3UlagujhpOtHWf9B6uihbJe326epi2Bo5rrsIP:wDNUlfkhpYWfLnbdr1
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image37.bmp

SHA256 4ce6eb63d883f7e5c48f62046fa9699379c0145aabf2a5caa693e1192c389f2e
MD5 201cb9e78bef8120616afb50409e7e18
SHA1 a41c0ade7beac93a05c7c2d295d309f83f527d9f
SHA512 c17e7e57c20b7a52ebded3cbae41aea141422406b8d046a4cf1a36270c77382890085cccc2b1d0075098875e5609e67cd68134a7184bb1d31bcae2b8cb200e02
SSDEEP 192:XR5nSdzQfcxR59eq9UPlXNMomtU14SA+QCXlfRr:XRgytytW4/+Q2F
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image38.bmp

SHA256 150b21c6b74a7c1cbd4159a1c0953cd456195415b1e8e135d0ee8d1434885150
MD5 2c426a757d0910e67095ed6f9ead7105
SHA1 279861e85d7a12a707f4ea768b7e0bfd367400ca
SHA512 d2ca8ec88f6f5af676bd4e06ba57af0f2cb758ca5c16191d838e3fe14bb7dc7c4f4549d3d443597169df82e8404c859eff425e80a94eb9c3a3a3fd208d800361
SSDEEP 192:/bC7EYRYwPCsmmkaKQbgq1E4Ti8DHFJ3kFjSQ9mS:/diZq1mVKwgATifpFmS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image39.bmp

SHA256 8e333e7ef5b6dcf8351c8e8e971f00e4b49714a652285b1ee62a85d0b757675b
MD5 0798fe24cbe1520d8dce5cc44901c522
SHA1 2e199b68fa1ec71650f1d6bc560a87865ef45c42
SHA512 9c78940efaf7711148e897b9f0247a1eab873d5d5ae6ae6819aa35ed1b66e35cbe91ddc1924c894a6f5e5dc9c59fac838d515d46a808b63c1b214f2cfeacfb37
SSDEEP 96:4q0FSAYL9EQerYPXAgQvAWgwc1Rh0X9l/4b2MkKJyuNBSY5qy1gfn:4j8PZ0SbcIwcts/sgqfBSDQun
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/image40.bmp

SHA256 9d44212e7db64409ffde708d8e25a31d50bf4aaf008c06727b03dd1473dfdbf7
MD5 58be3d258257497bd9803fd65a7862c8
SHA1 d9ac69d2630deced33cc6fa84d9541b7a2350bb7
SHA512 e35bc896f39b31e08fe87e2849ea7f206f576273bf5f452ebc80627ff17777072b16033222adea5dbc0c672a434aa443d94da8b5ba08a119e2a7ed80d156ff72
SSDEEP 768:lWAYrw3eEoR0N2zVSimqgeu2oCmYTBVCV/vUEzHT+bG:lWAYrw3e9Ra24qgnnCHTBVCV/84HT+bG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/intlib.dll

IMPHASH e886a412cdaf11998a8eeffda508e913
SHA256 983859570099b941c19d5eb9755eda19dd21f63e8ccad70f6e93f055c329d341
MD5 1efbbf5a54eb145a1a422046fd8dfb2c
SHA1 ec4efd0a95bb72fd4cf47423647e33e5a3fddf26
SHA512 7fdeba8c961f3507162eb59fb8b9b934812d449cc85c924f61722a099618d771fed91cfb3944e10479280b73648a9a5cbb23482d7b7f8bfb130f23e8fd6c15fb
SSDEEP 384:XErRo4TdlKCdUk6qz46qu2vPqUcnlSHmkuPJOiya4fF0Ac9khYLMkIX0+GvBgK3M:XiRoW7Kc5bBq1qNlSHmkuPJOJa4f4CD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

17793

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

_mbschr _adjust_fdiv malloc _initterm free strlen strchr strrchr _mbsrchr strtoul memset _mbsstr strtol

kernel32

GlobalFree CreateThread WaitForSingleObject TerminateThread GetModuleHandleA MulDiv lstrcpyA GlobalAlloc LoadLibraryA GetProcAddress lstrcmpiA CreateFileA GetFileSize lstrlenA WriteFile ReadFile lstrcmpA lstrcpynA lstrcatA GetLastError DeleteFileA CloseHandle SleepEx SetFilePointer GetTickCount

user32

MessageBoxA GetParent ShowWindow SetWindowLongA IsWindow SetWindowTextA SendDlgItemMessageA GetDlgItem PostMessageA GetWindowTextA SendMessageA SetDlgItemTextA SetWindowPos SystemParametersInfoA GetClientRect GetWindowRect SetTimer LoadIconA DestroyWindow KillTimer UpdateWindow RedrawWindow DispatchMessageA TranslateMessage IsDialogMessageA GetMessageA IsWindowVisible EnableWindow CreateDialogParamA FindWindowExA wsprintfA GetWindowLongA

wininet

HttpSendRequestA HttpSendRequestExA HttpQueryInfoA FtpCreateDirectoryA FtpOpenFileA InternetGetLastResponseInfoA InternetSetFilePointer InternetSetOptionA InternetQueryOptionA InternetCloseHandle InternetErrorDlg HttpAddRequestHeadersA HttpOpenRequestA HttpEndRequestA InternetConnectA InternetCrackUrlA InternetOpenA InternetReadFile InternetWriteFile

comctl32

ord17

$PLUGINSDIR/jp_license.rtf

SHA256 f35bd0bb83bd565b5830df90a0280726746c523ac00c34f7a8211d92ed371de9
MD5 2295052cf62645dba3faf2eda7615284
SHA1 35a12753dab4c8c038112264b392e3568bebf2b9
SHA512 fe71413c234354551fd350921c42edc3dd042f3ef7272189b3d8195dcf605420fa6734e315f194c26bcf9b4327ae7c0f7475c1b573656e69d26348924707227d
SSDEEP 768:gEz9fy2DcPMRC90OtKWcURiuowatg14J4bR0+2he7tsGUY60V+Sd6GvzWG6idwxa:By7yGCGJ9mm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/license_Ciuvo.rtf

SHA256 36438f8057a12df36d93c249b90cff0df7d50b70aa4ee9053bf5902e6f5e8340
MD5 ba4c90081e04285a65dc539bb7ecc1b5
SHA1 858a3c8f576a5369ca6c1c19288c7601224454bb
SHA512 17d01f17643cc978aa855916ccb2fea15c7b8742f91d5c6b42b64062fb6aa8b826ed2c769ea35a4308ef6746a67df1c20c81cc63e5ec45e8caafff10eb9baa07
SSDEEP 192:Oe66QzSvmgoUpYzKCXHjJnaKFQusE+VjcQh+gg+KpehSJSy3zS2GRerpadVB5NAx:u6wStoUpYSKcYAWJjMdT5ivZfF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/license_Ciuvo_de.rtf

SHA256 dc3838a77f2869905c5117814f1eb4edf8c980994f4fb5c728518e9ea0835442
MD5 c17d94791d08bc745dfb92155cb214fe
SHA1 5fdb5c87f120baea6d77db3c7a1d8150c2fe96e5
SHA512 035c133c8e547d36eae7246e69d0ef57a447a9a3a7b5dfe48c465c5357d7abedfbdef74717ebef76a9f5e8f05766f6223a64cbd22e60640b5661d09f5c67bb94
SSDEEP 768:fmDxjufnFvTCPe+V9EOReOb1vPwgyr+dX/VHDfAhWba5TzAVqnD69n:4vPDhddfMWP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/license_GDS.rtf

SHA256 9e4ada9fb4257e97feb8582c94f3a90c9a789d90c8cc45191eeffe7e90cf51c3
MD5 572c844641b7c89bd8e5c4b09db51eec
SHA1 7db62a97beda7fc9082e324ac0bcef1fb6ddd8d3
SHA512 74209b504f03749121dc76e95057981d5130f4fed5b718f64e95634ad0f32ebc611a61e7761d338eb470dddaf85c70897eb9132f57b181afe5139f248bf69547
SSDEEP 768:sWpF1sXIAbjZ+SjluFI7csb5ftkhL5UMHX6YZr/+nvwMwA2/Rk/CusmUHo:7L+fwR/q/lx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/license_iolo.rtf

SHA256 9b22e04dd604b521d2f94d5f2f5381b63e4dec75c2ec644605d519070ef2b45e
MD5 fa686d2f6cee9080150b9c273db7e8ef
SHA1 1d9d4db6acdf6c9af6036cc1dc9766a65fe3d298
SHA512 46013e6e6e53ca4dd65409e6f42010536f3133e1bacf3266b1e4acbcce5bc7120881fb1105c538103fef415e4125d0537cfbbfe5a3c6b6d55d1448c94f86c334
SSDEEP 768:dK6DBjUzF50JEuRwRzR0R1btqYr2wW5VU9YuWcfjWQ7L2vBIBYmSSQJ6j2jCjAcB:sJ5uByJ6BudgboXY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/license_pbr.rtf

SHA256 45df50add034de53c266945c24181160d308342e848872b133effc1077fe02ee
MD5 d27946865ca1eadb4e44ed2f0a612cb6
SHA1 3b764b75d8ef713d0f338227aae7dd11ae4427c1
SHA512 d18f9e9165ad96634b2ded4ef3a772156329a69ed6680f1a65bd016bbe2789d9115a1b05af469e37333294ad7e330a35b3813911a546f04226e9faef5b209238
SSDEEP 768:je6mikHrBLxRYMHX6YXL5UMHX6YhL5UMHX6YyLvRYMHX6YJZcXlBGBBuBLxRYMHf:Sn4vtybALZiLiSxp7kDe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/license_pw.rtf

SHA256 d74e676b28dcae57df5027f4167b107a4597a9ab99754d5844ae639b88e5ec85
MD5 1397d6205e393a50b8ed0b98bff4310f
SHA1 7eee5db6caea6603b3c21c65d6b3600d806916ba
SHA512 5bc18c65300ac2e0174f5a90002e9a9915c54efadc64d6d078fd4875412b5042e2e61d9a9a83cfedee596bce41eb5210b65f699a764fb8ae319a3031b99c8e95
SSDEEP 768:ExgL1TtcaEN0L25ovNmkRi6dHnlFarvevr2k:dsN35ov4kRi6dHlFarvevH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/license_red.rtf

SHA256 6f1966e4ecf19132b36578765131ee2545948d381227b02d6091969f6ad737a8
MD5 127c1d2e31cb5f4b6933453b18dbe029
SHA1 8295dc55f4ed424cb8ed9a8c1d6a48146e7cf9f3
SHA512 7a0e98ad3b3f642722785ea0ee107198fa7c52b427d4b8de686e5d3366d25f2ed4acdf50922a114417fdce725ac87f29baef5262bac9bf39191d6b176f9cff06
SSDEEP 768:je6mikHrBLxRYMHX6YXL5UMHX6YhL5UMHX6YyLvRYMHX6YJZcXlBGBBuBLxRYMHc:Sn4vtsvJidKlt/Cz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/license_rr.rtf

SHA256 3fd075e818ebea8d955a7bd19808fa41297fcaee13f08f18815f1f091ec29215
MD5 5cbcfdf6dba0b92aaeef61de113e1d57
SHA1 438407cbea0184258a96fabd1b73d4c97389974f
SHA512 7196437ed731cf9b9847266e64b1e99c8ce9b5afcc5a2650882ac6543a70bf370df26c9f6148feade80e9e8b11d0035936b3edaf1c6b98d5420459fb9e6e3f9a
SSDEEP 384:WMGugFH3F1sxxaZzTBOLVkQkQiDWuQ63ooqqrob8ZH0jtTzdZXLRy5:OH3F1sxxaBNGiiuQ7onrowHotTzje
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/license_rs.rtf

SHA256 3797dcef5b988f62e819d152f7fd2d66c370b924ff9fad4bbefee182a2031888
MD5 0fd9d843efc7d991fd8d6fc903103820
SHA1 2ec67ade65ab35c6e4c4415cf2479597ea2c32ff
SHA512 9f2c59de31a322d260918e3baef9b5582c326d127b938b78d0ee24400da1a465397206d26b69a16b2f4ec18490b56e23a78e0b679a8d24ff9d14395628cc0aac
SSDEEP 384:mjZoBCb5NHlNnUy9h2SNAca+v+I7e8YWSAZpyYL6ChVoyGkvumFp2:dyvnVa+G5A4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsDialogs.dll

IMPHASH 1e2884056e655f2b7bc5a904e352fc80
SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
MD5 c10e04dd4ad4277d5adc951bb331c777
SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsisdt.dll

IMPHASH aa911a57ef69e33e93666ad699a8d7be
SHA256 2261027077f23c8dba6b72af28862832aaa059740d0f5634b46cabb14326dd10
MD5 df4795dfabe3bc9278a73d496cc4b40d
SHA1 2648ded47e29ecf3e1a1cc20c631e83caf566897
SHA512 013d9712c3d699a7f41ab3e55931c9abb421fb2eda3542da5a4831ad2f073a1b0643120cc78147db0bfcd01df98ade3045ecb2f1e252fff1dc40be845e5ae303
SSDEEP 24:etGSyYi61xyMmuEwv61OVXOwr+t5blXgO8ELnD3TPrHjf7Xz5CY1aeBEW58q6TvK:6y2xyNuEwWwU5blmPeB958xTvT7L/
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

1

Entry point

4424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

52B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

576B

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

144B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE

Name

.edata

Size

76B

Virtual Size

76B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ

$PLUGINSDIR/real_license.rtf

SHA256 4d8f8a38bcc254e89ffbcf6660648bcc5e04c9d4aaaadaf980b609d314906d38
MD5 61b8d4d0bc81434641ff0d7466ad00ac
SHA1 fc29bd42422605cc7bb4cbda698128ae424bf024
SHA512 8689666c6f28c53aa3a1d47a79aeaeb882129e1003cb1ea1feee6813a248d8078194b0ca471799e8c1474401416465ae05e571f19ab8fac8f44b0bef6581dd92
SSDEEP 384:Z75UjQjthSD0rPZLamcbae9SaRM49qUydLJVKni5j62:t5UjQjaDAwEmM49qDdLJAif
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/registry.dll

IMPHASH cd53277eaa7bbb8fb5b2b678274dcb4e
SHA256 ae53f8e00574a87dd243fdf344141417cfe2af318c6c5e363a030d727a6c75d1
MD5 24a7a119e289f1b5b69f3d6cf258db7c
SHA1 fec84298f9819adf155fcf4e9e57dd402636c177
SHA512 fdbbedcc877bf020a5965f6ba8586ade48cfbe03ac0af8190a8acf077fb294ffd6b5a7ae49870bff8cacd9e33d591be63b5b3d5c2e432c640212bdcd0c602861
SSDEEP 384:Bl1fUuJHxreh2OatbswPCr64oLchV0oLQYYfVB:BlBzHxrehKbswK2TchDLQZfVB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5428

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer