ab522187ace21584bcffcd329eb7852b_JaffaCakes118

resource
ab522187ace21584bcffcd329eb7852b_JaffaCakes118
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/JWEB.exe
unpack001/JWEB2.exe
unpack001/MyABCD.exe
unpack001/Uninstall.exe
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack001/save.exe

resource	yara_rule
sample	nsis_installer_1
static1/unpack001/Uninstall.exe	nsis_installer_1

IMPHASH dae718ca7c0da2949ad685c2d593ec7a
SHA256 9d3e6e991d103ced202ec1884a14e9eaf7f3fe0be9c7370bec036c9745ec106b
MD5 ab522187ace21584bcffcd329eb7852b
SHA1 e6d845ff565d73d134c6a4ab4af0cd1d61a0fe96
SHA512 1580e74a942a5ccbbfc6f836ae453f1e0643f17b46e352abdebaf0112b8f1ca5b3ec26cd8e2924cb3b5abac892122f82d0d51742274d88dcb54c0719ec0423d1
SSDEEP 49152:0UE/STGbDnZAp/oMaTru9mqaWlnr3le94KOpa8+yyoglAPR3nJCPiuN+IPlIlhu:XPTgWNmTuVaf94eovfCzj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

kernel32

FindNextFileA DeleteFileA FindFirstFileA CloseHandle SetFileTime GetFileAttributesA CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA lstrcatA SetCurrentDirectoryA CreateDirectoryA SetFileAttributesA Sleep GetFileSize GetModuleFileNameA GetTickCount CopyFileA ExitProcess lstrcpynA GetCommandLineA lstrcmpiA GetTempPathA GetUserDefaultLangID GetDiskFreeSpaceA GetVersion GlobalUnlock GlobalLock GlobalAlloc CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA SetEndOfFile UnmapViewOfFile MapViewOfFile CreateFileMappingA lstrcpyA lstrlenA GetSystemDirectoryA MulDiv FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA GetEnvironmentVariableA ExpandEnvironmentStringsA GlobalFree WritePrivateProfileStringA WaitForSingleObject GetExitCodeProcess SetErrorMode GetModuleHandleA LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar GetCurrentProcess GetWindowsDirectoryA

user32

CharNextA DialogBoxParamA GetClassInfoA CreateWindowExA SystemParametersInfoA RegisterClassA EndDialog ScreenToClient GetWindowRect SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA LoadCursorA SetCursor CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxA CharPrevA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow PeekMessageA DispatchMessageA PostQuitMessage InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ExitWindowsEx

gdi32

GetDeviceCaps CreateFontIndirectA DeleteObject CreateBrushIndirect CreateFontA SetBkMode SetTextColor SetBkColor SelectObject

advapi32

RegEnumValueA RegEnumKeyA RegQueryValueExA RegSetValueExA RegDeleteKeyA RegOpenKeyExA RegDeleteValueA RegCreateKeyA RegCloseKey

shell32

ShellExecuteA SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc SHGetSpecialFolderLocation SHFileOperationA

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH 3764e6c387ce3c76b39936a24d523dce
SHA256 75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84
MD5 4c7d97d0786ff08b20d0e8315b5fc3cb
SHA1 bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c
SHA512 f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a
SSDEEP 192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

9995

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

123.swf

SHA256 aa8bc6663346ddc5122b4a53aafdfa119067937ad3c38c94f59a7651742e3e1a
MD5 3b218be5cd634fe1c064027d10f85ebf
SHA1 72e832a41ca03d432a10cf010a5b774cd39789d4
SHA512 15761c7f6b0713099fc42ad0c834f61189834873222cebd082ccd8cbab843dfd2b221b58bb800c3725713e1dc77fdb291266b5a53a0d951be0944e272fc1f38b
SSDEEP 12288:fgrVMBaScV8/iaQ6hs/+PO/XRdkIanpNYkOsAIa:fgrw/BhoZ/OAkOsAIa
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

123theme.swf

SHA256 412dc8e87fbe46d368d8c1f41a2804f13513af44db1940d457be3d5b6ca0f144
MD5 c84fccdc40902360011ea7184e6fa0a8
SHA1 07d6642f5a54d88b26826dd3bd2067c20606dfe3
SHA512 75f72e90c71a7f87ed675f8fa5e66feeb3ea5dbdbc5fe8a940ba3fdd2b1f55611b6d4a9a3001b468ecab686398d447cf584e8283c5ce1d91156799963fe4374d
SSDEEP 1536:5Tygx6D2SzNxTo61AkRlk9gP5q5USabjzogGlk4fbTH:S2Ko61AmkK0U/ld4fbL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

123theme2.swf

SHA256 3409c773c312bec27f7adb4a6862ef62c9c409f4c6971815b65f998bd6ee5b15
MD5 4a1773831d4f72a958fee3c2e29a58ef
SHA1 156f2b341042ad8896cb9a7036f846aeee1d9288
SHA512 db1172261ef331ecf1cb2c4b1a1ff56470d1009134b9846bc79bd256012bd2bd8d53cea9ad8d1ceab826e9a47f4398ee746d38da7bf84abe7cfd31b803a1ba9c
SSDEEP 1536:2DsUOR6xBQEThx9YMC465xlAfxoyLWLGrASi2AOSDqbq2BGA:2De6BQENx165xCmWW6rAV251baA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

File_id.diz

SHA256 8868516304b3fb5037f7b09d43d3f7523b1062c6c56ec7314dd304ef2380413a
MD5 620e5e549cd09f42f39d60ca85fa3f6d
SHA1 8e36389bfbfb0bebac5f79c2eaabb883b55ebf4b
SHA512 4757046d84664b948193296bc0fa6d316fe39c4275a2ee9a63a9c0a2d37566468c24e561760f5022ab097919e4d0604440d0088f900f1dd2c740f81a33db84b7
MD5 SHA1 SHA512

NSIS installer

installer

JWEB.exe

SHA256 16be3cc51fd7d6f9b7dfd52b69ff6727b68f81123bb5be8bb940863f880b0d69
MD5 927a780c86272e577a0dea05cebcee10
SHA1 2133691455ec6912011978e74835529bac8d25fa
SHA512 47f40991b308c0fe1204d49e8fb41d62d8f0574f57431318f12bbb50b1a17b1653869eb7f0d3be7210a051d81937343fa1e42cb5ab84508778dd189f1b807012
SSDEEP 768:0ImwkVD7qMbKVjc9YFAg/zLtnGzcKdtIaGH86S:07XqMbKS9GLz1G87RS
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

1

Entry point

19704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

8B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

JWEB2.exe

SHA256 16be3cc51fd7d6f9b7dfd52b69ff6727b68f81123bb5be8bb940863f880b0d69
MD5 927a780c86272e577a0dea05cebcee10
SHA1 2133691455ec6912011978e74835529bac8d25fa
SHA512 47f40991b308c0fe1204d49e8fb41d62d8f0574f57431318f12bbb50b1a17b1653869eb7f0d3be7210a051d81937343fa1e42cb5ab84508778dd189f1b807012
SSDEEP 768:0ImwkVD7qMbKVjc9YFAg/zLtnGzcKdtIaGH86S:07XqMbKS9GLz1G87RS
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

1

Entry point

19704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

8B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

MyABCD.exe

IMPHASH d20a9e341245699775e8760818473a10
SHA256 1c8520b407c5fc9bd3924919e3e7b7e10035da24b7950cf196695bcfeba7cd1b
MD5 b9d8809dce250914cb68aaa4c3994ef5
SHA1 443187dc82824e21aa8b88ddc362ddf96c6f76aa
SHA512 0df6428e4fc0e2bff24faeb434f25434ec8f5f59a2bec150f1b72376f3f011bdb2cd0982b14f45f2820f1b1fe374f86d469001da698a6d7aa90a604492a91821
SSDEEP 6144:T0/iIntSmDnCTQEjqbgtWKdC9UGy+DTPL1vMi3AYXZq/azNQXVMGhR/:T0/zSknQPmbFlXTPhvHA7azeJb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

54192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile GlobalAlloc GetProcAddress LoadLibraryA SetErrorMode InitializeCriticalSection SystemTimeToFileTime GetSystemTime GetTimeZoneInformation IsDBCSLeadByte GetACP GetCPInfo Sleep WaitForMultipleObjects CreateThread ExitThread WinExec CopyFileA WriteFile SetEndOfFile DeleteFileA GetVersionExA CreateFileA GetFileSize SetFilePointer CloseHandle GlobalUnlock GlobalLock GetModuleFileNameA GetCommandLineA GetModuleHandleA ExitProcess lstrlenA GetStartupInfoA CreateProcessA EnterCriticalSection GlobalFree LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter

user32

SetTimer GetFocus SetCapture ReleaseCapture SetCursor EndPaint BeginPaint MessageBoxA DeleteMenu ClientToScreen TrackPopupMenu GetCapture GetCursorPos WindowFromPoint ScreenToClient MapVirtualKeyA CheckMenuItem InvalidateRect PostMessageA GetDlgItemTextA EnableWindow SetDlgItemTextA SetFocus GetClientRect GetMenu SetMenu GetDesktopWindow MoveWindow DialogBoxParamA FillRect KillTimer EnableMenuItem PostQuitMessage LoadMenuA ShowWindow UpdateWindow LoadIconA LoadCursorA RegisterClassA LoadAcceleratorsA GetMessageA TranslateMessage DispatchMessageA TranslateAcceleratorA GetWindow GetWindowRect SetWindowPos GetWindowLongA DefWindowProcA IsWindow DestroyWindow CreateWindowExA SetWindowLongA DdeInitializeA DdeCreateStringHandleA DdeConnect DdeClientTransaction DdeDisconnect DdeFreeStringHandle DdeUninitialize GetKeyState EmptyClipboard SetClipboardData EndDialog GetSubMenu LoadStringA OpenClipboard GetClipboardData CloseClipboard GetDC ReleaseDC GetWindowTextLengthA GetDlgItem DestroyMenu

gdi32

SetPolyFillMode StrokePath ExtCreatePen DeleteObject SelectObject StretchDIBits SetDIBitsToDevice GdiFlush CreateCompatibleBitmap DeleteDC CreateDIBSection GetDeviceCaps EndPath CreateCompatibleDC BitBlt EnumFontFamiliesA ExtTextOutA SetBkColor GetBkColor SetTextAlign SetBkMode SetTextColor SelectClipRgn LineTo MoveToEx CreatePen GetTextExtentPoint32A GetTextMetricsA GetTextAlign GetBkMode GetTextColor IntersectClipRect GetClipRgn CreateRectRgn CreateFontIndirectA DPtoLP GetObjectA RealizePalette StartDocA LPtoDP StartPage EndPage EndDoc BeginPath CreatePalette SelectPalette GetSystemPaletteEntries FillPath SelectClipPath PolyBezierTo GetClipBox SaveDC RestoreDC CreateSolidBrush

comdlg32

GetSaveFileNameA GetOpenFileNameA PrintDlgA

advapi32

RegSetValueA RegCreateKeyA RegQueryValueExA RegCloseKey RegQueryValueA RegOpenKeyExA RegSetValueExA

shell32

DragQueryFileA DragAcceptFiles

winmm

timeKillEvent timeSetEvent waveOutReset timeEndPeriod timeGetTime timeBeginPeriod timeGetDevCaps waveOutGetDevCapsA waveOutClose waveOutWrite waveOutPrepareHeader waveOutUnprepareHeader waveOutOpen

Uninstall.exe

IMPHASH dae718ca7c0da2949ad685c2d593ec7a
SHA256 e83f23d854def102dab373ffdd248e2c2ce15f9afd22dc4e3229c4f45d1abb27
MD5 767ef316a0fb37dddd09d1164c2fc3f6
SHA1 6c42e904bcafefc1f30db2a0ab244a8f50305b30
SHA512 692c74dfedccbf8217786bddbc54afe3354fac6409370f3a31306d3fa5b25deabb9cc9e68c7b4bff0a28fd61524a441c7b668f178d463f45819c29aedd9e67ac
SSDEEP 1536:9e0DnjRrJav2FnUIRr2vMYBJhqAELVigveH0+v/5QV:fD11a8YBJQAI0lwV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

kernel32

FindNextFileA DeleteFileA FindFirstFileA CloseHandle SetFileTime GetFileAttributesA CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA lstrcatA SetCurrentDirectoryA CreateDirectoryA SetFileAttributesA Sleep GetFileSize GetModuleFileNameA GetTickCount CopyFileA ExitProcess lstrcpynA GetCommandLineA lstrcmpiA GetTempPathA GetUserDefaultLangID GetDiskFreeSpaceA GetVersion GlobalUnlock GlobalLock GlobalAlloc CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA SetEndOfFile UnmapViewOfFile MapViewOfFile CreateFileMappingA lstrcpyA lstrlenA GetSystemDirectoryA MulDiv FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA GetEnvironmentVariableA ExpandEnvironmentStringsA GlobalFree WritePrivateProfileStringA WaitForSingleObject GetExitCodeProcess SetErrorMode GetModuleHandleA LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar GetCurrentProcess GetWindowsDirectoryA

user32

CharNextA DialogBoxParamA GetClassInfoA CreateWindowExA SystemParametersInfoA RegisterClassA EndDialog ScreenToClient GetWindowRect SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA LoadCursorA SetCursor CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxA CharPrevA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow PeekMessageA DispatchMessageA PostQuitMessage InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ExitWindowsEx

gdi32

GetDeviceCaps CreateFontIndirectA DeleteObject CreateBrushIndirect CreateFontA SetBkMode SetTextColor SetBkColor SelectObject

advapi32

RegEnumValueA RegEnumKeyA RegQueryValueExA RegSetValueExA RegDeleteKeyA RegOpenKeyExA RegDeleteValueA RegCreateKeyA RegCloseKey

shell32

ShellExecuteA SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc SHGetSpecialFolderLocation SHFileOperationA

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH 3764e6c387ce3c76b39936a24d523dce
SHA256 75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84
MD5 4c7d97d0786ff08b20d0e8315b5fc3cb
SHA1 bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c
SHA512 f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a
SSDEEP 192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

9995

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

abc.swf

SHA256 517c9fff1108e2e23e00ba9fa9561430570590193ed30c0aed547befde0942ca
MD5 7a0bc312b5e5c70ddee6e41d3e2a9012
SHA1 26937f5b18271f552629b00089f1ec012de80548
SHA512 291725a0b1ce06aaa36a0420293e5c43aaaa3ed27999ad58656a6153694070e53b8fe265f8b6c972290649bb4531d6b023447fd429a840c5abc9086fdcdad89e
SSDEEP 12288:2BK8lpMys7XpF8ICVN6U4xdPVF9PMMYBQ/6zBPF4dPHX9EYo:b8g/7PiNi9F9P36Q/CFc9o
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

backmusic.swf

SHA256 a830a418ce539b7147715648d0d4cb99a209a976f78a7aff357e82e26990f7dc
MD5 7838dbae95b122c1b16846c2a071bbb0
SHA1 9b11aa9daa40688ea19534884f0a22882f99a2c3
SHA512 79aadeab6b5e2601fdd60f1bf2d37b4cb956675d1217ef10fd42afcb352e0e1f29db3fd9ca1caaf9d7564cf14f723ad9133f24049dfb2c1979f3e0789ea0309a
SSDEEP 1536:qbF5YgpqSXTkZJoHbxWxk7qB2MKSoTZf9Dr1ckOC5V:qbFagLXTweHbxIwlDR9HxNV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

beetheme.swf

SHA256 c6deb44d5acc8892e71aa1e0cef8a38cb5b83dd1e3bf0cbe59164d6c221a8b84
MD5 eaec659b46e2919642e10caf6ec84ad0
SHA1 d193dac7cb2ff33f025fbdd87af06cfdf5585e5d
SHA512 9619503559bcbab7c9732239ca89d5b7ea9937930005b40c91a732e9f5670ebcaef17e1cef75c58b8e7923adfd425b2891164150d7ce81bfdd7c26b5b6da00d0
SSDEEP 768:+R9MB58ANf2xzMCALrnC3DhxHoE955HC09NbYhjGOXa7FpCK52:+LMB+ANf2PynQhxhf9Chj/KCKw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bugstheme.swf

SHA256 f2ce29707a527cd7e67ab61b5f4f109a0d312a6abad5251941c1a53cf88b8095
MD5 7aa35f400f6653cbc1ce971112e822dc
SHA1 5f9590da587d60354fd32589fdd37259211a5753
SHA512 a1a7194c834047324d53771c8c37cc9cc38a95be54531c03dd190622ef8c241729234263887b53b04bdbb6bc255b413736f216d81e401a1de6ca073c97ad7362
SSDEEP 1536:bTVYAfuatc7T5zLZ4PPIWfe1auNV5Larq3dTaPRj/on:b53fE7NJofe1nA2EPR4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

correct.swf

SHA256 1b02f6e2578ffe87be39420fe72d4ae5f8a243330e62a1bbdd5b91d116149055
MD5 8a1aa61e2dc2579ac9df622ffc39518b
SHA1 13e4c1aa1cc2cd84c670c198d9f7b18de4dea6d2
SHA512 5935d097e2e197bfd640a8c157e5c45879d5edc0769db667fc4bfd165a180cef4bc433aa45be0faffc2c8d65dd744bb2a872c6841c20650b5729bd0446d1c1d3
SSDEEP 96:GLR3nSBUCBB0a2PojjKMd9FU6glqDAl0DUlEJ+7:u9qsh5PlqxDUI+7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ducktheme.swf

SHA256 f42cb87416df99c059dd4e28e23be14ff49a2a619e46afc9b03506f77f7cbd44
MD5 1b31fb3539978c8a4bdcf465647187be
SHA1 f0cdd7339834a5b79b0812f087d56ff0ddc126ef
SHA512 8ef17ed8905a1beae8e7918386c119ea24b25fd3030a003a9eea452e27a0d1d88ed6fdd5e8dfa87b88c4558956a81d2b4cb5aab5f3b5a6105631aaadd5ea9403
SSDEEP 768:t6kIgJq7VJPgxeaF6v3UEUTEUI/jtMvz/trKi9gZqL0vme/chbUl69Yuq:okIgeVWxfFjFwX/avzFn9gZqCmthbr9e
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

elletheme.swf

SHA256 2c8d07e88621d5a037169a7f62337caa833304722aa8086ef0a95f861d73be8d
MD5 1ac6757e6016472ee636300fb1f97e30
SHA1 299297d5400f095dcf9ce4fafca26878c78f1a21
SHA512 a5ab03fba5b4ecfc3c5c932ddee96ca3d11b7c2a8a0ec9c75b3b9430b89258d450201c5c63fe8d805a6e947d8d71cdebe5c27da3e77159bb9f6f89786c2842c5
SSDEEP 768:bAD2Z/GESIoXc6CvL/fc5SlUAzemqYp2LiJOY4iHFqSkCq2c:bAD2s0oQTXc5GUAzemqXiEzYFqYql
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

english_help.ini

SHA256 35df1cea60029a449d763b711a812e2eb334df68618d15c8e131f1f69b5f3ed2
MD5 c628ca312ea81adbbe450c9bf2b49d6c
SHA1 0a2274e11fd17516a118d05390e07ba2e54bebd4
SHA512 423df834a813adc76a68c8a2238513eae6f799ed4c2df2699bd1f85d44b89b48f3fa78b95f9717a5b9bbb563de8f1223c1990d4bceead1b00fce59f1c1a71b81
MD5 SHA1 SHA512

NSIS installer

installer

english_myabcd.ini

SHA256 63f0b6d123f73c8dfa6bdebbd01b8a70c735d8754256d0612b37557ed2ea50d7
MD5 12d4130c7a71886fe6e37a97b1e536bf
SHA1 816ea4b5610156bf9a59d49dafac162b7625beb9
SHA512 9296bed6d478d2df377cd1e6a166d4116166f6c2f15d0eeacc6f5676274390d09f4a6269f00cdb956859ce9ef577aeeef4cf68dc1422cac862e1b69da6491ee4
MD5 SHA1 SHA512

NSIS installer

installer

english_reginfo.ini

SHA256 cec12d929749d858b338389b1573eae2cf1d08f700c19cb128bdbba60ce87e8d
MD5 c04377bc6dde8d8a6ae1ae3a84f1a068
SHA1 70b00d8273d7c8c337d02f836cc2ad7b8e6ba6ed
SHA512 abe90689e1ef07a12f1e989eb98f05eaa096b7a7d8e10939152d06e269ad43d73ebad6e8b1456a1a69f52700e3cd584bad97fd7f09de27b75a7e2fd036d1c4fc
MD5 SHA1 SHA512

NSIS installer

installer

entercode.swf

SHA256 a04b51c803f490d3ec8f7966a570404378c7a766c6c948e414bcd67bb7b85f6c
MD5 4fcffdaa24b29b10732345f5fac8b362
SHA1 8674b5c54e5ff4e6d7c952e6f6e0271329c8d14e
SHA512 bf4932817a2950bebc474a10c9a64eb49d8a9c3b90844d49f6ee21b1b273d15a4a0d6b4bd491a8ec96d1e950438e1dd1d02c8c4b0d63d3ca0f6fa2fe3f19afca
MD5 SHA1 SHA512

NSIS installer

installer

exit.swf

SHA256 13ff2b3b08ad06087c20e3f504fb70eb7c984ec93d61a865f5a5c185f0054bd4
MD5 c90a49852c245f22231aa02d8a80a150
SHA1 0ae91a7fcd1072c85b3c60b82dd6611140e325da
SHA512 82814be6148d1ccd72d88a83a0faf3e5f37c70b4c9455b309097e255b1ede62d9e71aadb82ec360f06f3f2f659519d37fd7664e54feb8f668a36d40ec037a55f
SSDEEP 768:/kzmv4ES4ExAvGC1ezdakv9jQunFdKKKZnITYehWNZKWEPDqMJ8chv/ZQA:/smvBUAvbKda89jxFdKd6TGIP+MJblSA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

fishtheme.swf

SHA256 d331396b0fd98e2c3beb7319a906f75aff6efda74dafd2f905dabe5d36096965
MD5 60a3053f8766898b7bdce4e5297d596d
SHA1 095d48db1f9f813be880c5c539dab6df539e0010
SHA512 cf104d1faf38b360608f5f8e12bc4292a0267f426822740d9f30cc0bd0f2f84f0e7ac4cea8f7b7baf2c04c11f44092b18d06163aa8698e282149e5e2e56ec496
SSDEEP 768:aaG0fQmqkS/8FOcUa34D96vhTg5iDX+NHbBr6KNsdkGlruBPaeFGsFAkw3TdwKMn:aaG0EUEB5iqNt6KFGlWaZsFAL3T8P0M
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

frogtheme.swf

SHA256 c4e258d553879f731893e57b2ad44822d7ee1c74969587ae487f96fc4d74258c
MD5 c25122b0d14462405c89435173ec73c8
SHA1 d2dd95ffb9815a73c7a51bec1862bd7a16e28649
SHA512 f7f282b45f68db1886704044337a34ff86efdf746ed8b2925c4bc9e369e3aab1b4711d40901384a67e3940a592d30b950580e77b8fbc57a2af14384d4cee856a
SSDEEP 192:mTgjSsWnZMSqHww+a3OgfAOMATFDXNuxqX4PjNdOB48zEm:GgjSs0Zm//IJCXNusE648zEm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

games.swf

SHA256 86371b4433d84c48f1a8f2d946188e47e4cfc316b0cd74335205ce65eec134ab
MD5 2bf4d3c4df0b9d9e5aed7557316bad32
SHA1 a73a491a5ec3d07dae3d008c7c04c7e79daecea9
SHA512 ff3a89056533826191329778a8103df1682687c8952335156d2549c74db6e3a8389127cb0d7aa7ca75e14b7a6861fe1eaeb0f9adcc07d57215b8b226859f2220
SSDEEP 12288:SsFiOZc+M6gVZbBSOK5AzZsFtrBvkP5Lnb6B567x/x27T:SwEvnVZbBSOK5nrBvCnk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

help.swf

SHA256 20fefffd403acabbd67e805f8af0f47966e375393d91026a1bb557742ea1fe89
MD5 71ffb3e49efa9e822b13432c299544e6
SHA1 47211d9d8628db5cb54fff06b01cd4d0204457f5
SHA512 e993a93425941f871c9ae1bf06080b6145fd83416f58a087dc0c3d3007eee2b988e7519ea765cc38beb06d116efec5e70814f42efc65daff6dbcc2ec4d7484ca
SSDEEP 1536:gaZtM3WEABWzCaRDMSdFrsghWXtWEvffAR/UY:9k1AozCaN1i9W2Q
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

irontheme.swf

SHA256 7c328977bba45d4e6c067a771e65a6b45d177cdf43fa1b255e14415dabe10ee6
MD5 8f2f215892a98c1a93cbe4d7115dd33d
SHA1 6266b362bf399c854e6d877a23a9649613a81308
SHA512 537933fd444342ee449374d703da678a10406ae6f20434bf4b51e96f3bf68dafd2c158b2ea939670e90565e3e1bd3654d811598bb70f1844550b21abd7c3b95d
SSDEEP 768:CQHvrwCFNdNR+zIryNMTcEq8hrjRVknKwlIg:CmnxrFTcEFBTkKweg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

jweb.ini

SHA256 13ed75908df9a531db47ea49f587f3956c77af802b8e0847584c5a448c8caeff
MD5 e35e07e40a17a289a206569d8c171e2a
SHA1 ed8f17ed020811d7b40830d9ff4507d98def377d
SHA512 6901e2af98ae5f48f2fccee78907c92fef41f2e0718fb6fe6f93809bfb13d3a7571f795ac0b7a4665de14aebf227f1c8ccf3eda64945a4636d5abcf24531ce0d
MD5 SHA1 SHA512

NSIS installer

installer

jweb2.ini

SHA256 bbfe387b57a38941dc755204619c73d096e0d20b3508828bec2d17f843f58ec7
MD5 04a74b7bfbf1627b23ef3a3007519410
SHA1 06f35a918458d2e1d9650cef6654ab1a1b857325
SHA512 e0a33eacf7d4771e6767bfc2ea94a7f8282e88fa60388ce73bfe2dcbf7c57b9e897652f109d09a09f5ec46e3cfe00d6a4291bfc03ab81430882e4f0cbeb23070
MD5 SHA1 SHA512

NSIS installer

installer

lemon.swf

SHA256 7951ca54bd3da472fe0ba861ebdd900dc8d4458d5b3b5ee637f7ba40578eee7f
MD5 b91576a4e8dcf032d6638ffb2bc2549a
SHA1 7238c08079297c04526cc3b3f1407dba90bf2475
SHA512 cb0b4c568345376b7cf85eabaf6946858bd4322f93e61bbea1d5f0ca033165a274938c474f925102453d65335c8c1c82ea5cf59f890c7c26ca9eb78551529311
MD5 SHA1 SHA512

NSIS installer

installer

lemontheme.swf

SHA256 f896613e136f03e616f7a540a9a0209a7771946e30fa3cea685fde5d4fae53c7
MD5 703ca12984f0ab71b0eac2f93cab5223
SHA1 da083ad429c2178afda4b37f39b29fdba9a621f8
SHA512 31bba1a20b5c45951e4746c2b44163347dd4b751f6e6887827def3e063d02862da140e1c08e5e88ac79a6f6cd2067c6bf49847ce2ad44edfaebca1f05dd70fbc
SSDEEP 384:2ureIqsz/Jkkhp4mfS2ur70F0ASzuVdLrnXLLDwyjUy0yrnd2a2neDvvzlEsy:HreFY/GkhGz23F0ASzu3L7LLcy4yTH2P
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

loader.swf

SHA256 67d67eb83c2f5451bbf09299a3cc98e79956ccb1f9f78a8cecb4e900c6c806d5
MD5 be1c22f41455bd5288b74d6ae0fe07c9
SHA1 6296fa063d4a2e1cf5b8a3bf8d31efcfef45b201
SHA512 cf376b6abb829c750971d45831ca905ddb7d5e1718683ddcb58c872325e2af645dc189db416ce02a18eacfef228e0835b7241d17f4e83b3d42547e9d0b4b652c
SSDEEP 384:8n17Q419aR+5oQ1SRaJjNjVss6iI8oXDOeHVRjJbAvUtHF:gTYk53pJss6iI8oz395l
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

mousebounce.swf

SHA256 29c60f54e4c74f5e53ff3047be2a9627efacab4d18fbe80e34b7217a43799d00
MD5 6a15ce81a5a0ff45cfdc625bf90c6583
SHA1 e389af9b0642cc3e57cd67f88935fb2203f61e02
SHA512 d31a8a5a6b98dc5a9c9cbd28a6fe80d193ae5fdcdd0f5f545505a04263abc3845b1b6eaab92df58e24d09399da60f2b357d08107c39d3c2968fa609f7e605d51
SSDEEP 1536:SQnRK1/aVEnUudOZ1BOAhDX2I4+XkDb+DFdBNvskFOYHQt+:SAY1y2UuGBO2X2I4+XrFtskFOYwt+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

music.swf

SHA256 f55f7d5044090a0c52dfe6de95741e90b3317f5698f6ed321afcb8665c7ea864
MD5 2f6bd4a986bb25e1d7bd995f717bbb0a
SHA1 d0df82c25f2aaa9a004b9bd9bab11da4fd8c50e4
SHA512 c97828a87cfa5d361384693bbd96a9212421eff467bfa1b3bd824c8efba4d86bb7693542af1cfbe104f2b8e1131a50c7a2062b9dfc23fa1f750a3db940ce571a
SSDEEP 12288:CHr2QLVF/HCSjdUuR8kSQDOFNVzA9PF4IJe14jt6h:m2QvPjdUM4FNpAjXA148h
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

myabcd.swf

SHA256 2bf2d26a6dd165e023070877115e29496ae3a98389ef8759c42a03f377ca3311
MD5 6f1ca12b74d7dd7254a97e643282e366
SHA1 70a3208dfd1c196dde94f667abd8809b1f89017c
SHA512 e8d2386cce9861b0ed5522166280b368b12220c7a05a7380af8c8f7f72cc615f4910b8354875d96107ee49b66e22c0cdab93d4c534aeefd50a7b0edc0dad5c82
SSDEEP 768:ojEsEiUYlxTmglA9nxhSoEmFmf1oAOQFE+XquMW1IWcJFlK3fZK2FRolxndJrUvt:oYtMPlOfEtWkqJW1I7OBzSlxnvUHhuO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

owltheme.swf

SHA256 60be716bf1cc6be7892320a629146931959dafe7f67ef3ee009b9c5628ea5a5f
MD5 f876c6219b59bcd69c96ba4e9778f0fd
SHA1 44ef47d9b5d0f725a0c2f724ca35c7802c9c234a
SHA512 d1061a37bd4c2ec4e613bcb19d3db73b0c140c79f9bc7fa3e500600de9dfb980215363db0e5224ce62a24310114721616c2f8dd59473b66d219e2245ca9bf73a
SSDEEP 768:Dj4eekuTtgKs0WqRcHmq4zKbDHTWzxxLq18rNBqJbHbRwUeZM9/JTX:DUebuBxszkHq4WbDa3G8xBeb7RwUT/pX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

readme.txt

SHA256 d4b10c89bfd5c137b53dbe8a1b8828cf1d8b8d853977dabb6e5996bc10427389
MD5 cfad364eb9cc6eb5e13bef5d80c25fbd
SHA1 72d1baf3062704e16dd163d89f0700eab4a6d7cd
SHA512 421b46186a7ef61c39c29e3e39f391c7fb2b5e67fd3203dbe1b8a1a1bcb89c977dd23a2641641a684ac87e6f44c6c43e81c45a9e16ee368224a37f91e120198e
MD5 SHA1 SHA512

NSIS installer

installer

register.swf

SHA256 322f3eeba07884af02b100e8a31ce3df8580d6e641b61233a3c4f9d5b11f2b15
MD5 6f1cb8ddad20c71df9552f538bb528b6
SHA1 7398aae20fed21f94d176869192910ae02b92969
SHA512 a2bb9750d0efb94391f6ccdb5db790913656f6f42a32e31fe96efe1739d0bcd509f6be125fa8b02085d960964de2a2f73d17349ddcd7fa6ec912abea242078dc
SSDEEP 192:4ufOEFI3k8Ln5Yu336y1xEgbIzhW1lybqdOK0wNd+/OXczlCHFqcNAT9u4oI6j3T:FO9XLKcKI+GYW1IWdj0wpQDjEdV5L
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

save.exe

SHA256 6de79458ec1d8767fbe4d4c6f12cf42de557249752390850073c5f9c72883420
MD5 1239f0cc641f481c4345bf21da700551
SHA1 2fde712c1e39f0936600748e577113a27071d6a8
SHA512 ba03404ca1256413bbf51d2a5c09a4fe491c03bc89e76a769078effb14ae1b248915921be2b4b2c3648a732c5f390927d2486005a5e4e2c6c348430e4b015c4b
SSDEEP 768:gdN66whCtQ7/34fLGSO9Yn0xgv4C1Wns9wTsd:Ph0QD34fLGDynEafW0d
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

1

Entry point

77825

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

18KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

seashanty.swf

SHA256 0b6d141e3eb802ce7a236bb5f7e83657f632cdc98cf0254f7a8cd10a13892a4f
MD5 bfa5a9960cc84f1430f22a7257ee5bdf
SHA1 d03d20d2f996e97d4f89c10b44e815e4be23d48f
SHA512 b3e8c04890e095756310fa135414bbd11b0d3939a5e3d95151ede3c5e96a06a30ef79d6e8e5f5a61b018125bcd0ed497635127093bb760ebb3ab3548a57bc986
SSDEEP 768:iDqNBemaYZkGQ85DsBtZf2MpkxPkT9JNFOsi+Rbp8KeENlx:4OPXZR/Qth2MsMTjNFpXeix
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

sleepytheme.swf

SHA256 9d18391d5388e564b2e920acfa39fb515c5938b6c70fed55471ef7dfaad5bbf8
MD5 f2ede94efce04726eee779dc3708cffe
SHA1 6c968735fcf8cbe97b66316f49baeb0aea096dae
SHA512 3cbb1a09680e08111913141b4250d027fa0d6efe87c8c44a3424df72f1281ab62b2c7d82efa086da2e3aea1686f30acfa16b13689fc7026b93b626692f9743ec
SSDEEP 768:671XaeNI4ls97z0w6+ICJlMOWxDY8etNi4Jmwk2pic+dHcMvzqRa0Sam4+d:0t44lsiw/IGl1MONgdvus00x
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

snailtheme.swf

SHA256 4706c0191a1f7baafe88ebcd8030eef8a50243909ce084fd6b1fd3895b8c49c8
MD5 383676251f937d3b16b40bd1b8b2be37
SHA1 1397c5eb4a1e76fec680b10c9eaad50ba7c6e60a
SHA512 c10ac466d0085fc24d7e1b9956621f0529c08faa62e483f6389d381dcd248d23bb352b2964697ffe4a256bede5e92f14e6185dc811c74c4a7621f4bde7dd5883
SSDEEP 768:h2sUKl3Nbb7IuvRFw9dqZbBwJZRmtEbAG4SjCpGHZ0p:zUKldbb7JXw9dW1EdPfCpEI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

start.swf

SHA256 856d57d18c8fda944ccf316125af33bba236cb27d88d0f6ce2bfb7e40eb02fac
MD5 3164d47a9ea0c0fcda70ddf95155e644
SHA1 20aa9095e458e60e07bc23dff2f8b434b5e38135
SHA512 cf4cd122a7ffae5e639745227ff189aa123fb1b44ae55d9541de241572fc464ae0678ff4be21c96f3b3d03da3c26535e1ada8f5bc80664299ecf12b26f16fc4d
SSDEEP 192:cXCtwdrTK0tJLTuJ+F78MU2L0Xh49lQY3KnbnT:NwdrTK0tJLTuJq7ax4HD6nbnT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

teddytheme.swf

SHA256 aab7a86879b41464181dedef747104d11e675058dd3ed27b308d59f3907ffdb6
MD5 e6a9602ca8a60f848ce7c1a29a5d8407
SHA1 ae937fd7749d0998ad8efb2332fefc3db3fc0568
SHA512 d9856c94fd71778f66a353a1781a56c2f5f4664093d4d9073f8a6108cec72080ecb3c934d6d1f3b96d85150c3339648756501ddadce5654a2dea9e5edad3ff12
SSDEEP 384:4HMWRRrtKr0+aycvH4a1WoW3pOy0wN6ImnkSp:YMWRNtKEycf4Uo3psOIp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

toytheme.swf

SHA256 a4c2d62136a064a29f3d68ccce93781b75d6a8561f56ec1c07ad4f2622e49f3e
MD5 e1363169378db43f5f191fdb1025b8de
SHA1 d7995b41ebe122b7aa4b76bcd90e5a55156a23e9
SHA512 472078cbb21e94b49d75a6c42222ebe020c90f1d71d635706ef187584c02221e92b2504541a4f10e8eb2a0c5e91a2555572dbc3f52238df13791d900f4cc29de
SSDEEP 384:Yol/Zla+CN8NNGAUyUBJGgQvpHwt8D+rUC+H0cuQVOOAAt/T8XFhfpM:L/Zlu8NNe7GgKHirU4cuoZGXDfG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

user.ini

SHA256 58cb5e23bda3df75ee8f3c203af2cbf3173ebdc4063721f851d8d59006ce9745
MD5 8a2573ac29cb763becbc0c6bbbd825a9
SHA1 d75d92e8818dee306c10610b7c281b76995bd73b
SHA512 37491ca328a4161bc8db40806b7a4a72f3a9c51527e4bc4e74e09006a67e2a417f53edc3650bc420859f251833e4c8da3a7671fc38a645820b3d7c3177a1af98
MD5 SHA1 SHA512

NSIS installer

installer

variloop1.swf

SHA256 3d7984bc87d72e708624040c2802e86e73a9f889793f0390c304a7169e9d3e06
MD5 8cae4eb1ffd276ddd099809cfe54df8e
SHA1 385cf4ca119f46bb8654dfb1a0cde99d1ae066ff
SHA512 ee25dddb01d2ae87f52dc672461c360717619e5d21c1e723916e2a17a995373adc5a08fb0f3adfde419d8d329d27e6b4c5568d2df0b4fe86a26504525084b8c1
SSDEEP 768:RQSQuQM1oWRrlo6mWM9rpEHMOz60/0yRQyK4oS+R4/Wsuc:tZQM2WRrfDM9rqHMCCeK4t+R4e7c
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

variloop2.swf

SHA256 a0b273032d590dd8c8d08216bde3ff2d8900d5ac70f1ccb0aaca16e3d9e6857a
MD5 dca16e7c60a4fa13d145d03a20b94e19
SHA1 fb79667175d5d3ebf0c2885ee6d5a664339e4844
SHA512 46b3871b4490adb6f7b0ec824595b2a63399eb4729be373bfc15cf0de0904152599f97f979f9a9cd7f78374b27910fb32ad215c2d21cc872921beed18500f8a6
SSDEEP 768:OuVYx9SVj082mIs1f4scEBmtGRXCYBzkzHai5j:vA9/5s1gS0GRlcHaiZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

variloop3.swf

SHA256 f4b6a3eb7c042f79bfc65f31a3763fa474422aa8802d194d54060e8e1d4debb7
MD5 7d9627a937641f58c9a1226087e279a8
SHA1 eaa0128661b1dc4922ab90a2203e6811415ba0b5
SHA512 ccced82fde7b0c375f7e662833f54d3433ab24050f59c0fca607e4739de4435ff99873601eac20d74470d75835e35efaa3149a9398283cfa0e06de73d1f9abd6
SSDEEP 768:Dzh0uSzbMvu6RfClk2nxhvEs9NENbQxkh4G97ePrMRAgB:yuUQWEkkAp9NKbQxkCXgB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

violinsolo.swf

SHA256 73fb2c172f2b7ee139d5d373c97f998157278be3b6c143c8753264b2458adea9
MD5 983dee85bf687729ee9ac986541b8dc8
SHA1 75c18dd0e5966956ae754ec31e53678a4a110387
SHA512 404a0f0dc1bdd18ad9e88eb65b8913bc17154fdc9d763771d15f13aaf59af1bebe587de0ef2a08e8d2b34aa87d48c6d8c7edd304b74a48f4b5be77c818fc992a
SSDEEP 768:aOPgFY4BPjnGZxPkE63oRbwft5qmZXArSP5O:aOPgG6KFkh3oRbwfDTXA/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

welldone.swf

SHA256 550c5210d541829235fbde38662ebd7761fa0cde107359660827f4c297c6d7ef
MD5 012c3430bab362dc731104173017c896
SHA1 befabdaf45f9712a12dbc4cb4d5ccd268c71cd9e
SHA512 fc0d00c713669047683a07cdb8924e85a3591db248ba6de7fa17b5901a6411fb363abadf0936fe9c1aab093503ed806e252dc3a3fe853d7d7c9ab15f88886fa9
SSDEEP 768:gE9Z96YNMjQWFViCesM97gBiUcEp+BfYfypOsc9L:/jwB8CetgBisp+BfYKpOscR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

wrong.swf

SHA256 84e0ffa5f24f7653a30100c347c47f50531034a66045e512bc7ad587dc75194b
MD5 ccdd0b0267a7ad04cf6683ce27834368
SHA1 d7b80659b4362ab751300a39eccab8f4d8c7984f
SHA512 ce34332241e38db0e0d15c050d249a052d30a961350fc9df59d245550d0225a2c081313e7d2c5fb8116c03093eb3823a6f4c157b838fe7979a1d97ee678c2764
SSDEEP 96:bu7ZHl660qKDRsFVgNiMRt2gyqjY5fQsRPAj8AVYafIY0y:bOjLTtMzDynfQiPc8iYaf77
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer