bf554462c091219488a1a53fff22213df8d9530fa6ff0f59033b0c9ee9173555

resource
bf554462c091219488a1a53fff22213df8d9530fa6ff0f59033b0c9ee9173555

IMPHASH be41bf7b8cc010b614bd36bbca606973
SHA256 bf554462c091219488a1a53fff22213df8d9530fa6ff0f59033b0c9ee9173555
MD5 046ebd7e0f619f33de609ea3f126b0d3
SHA1 37a0b634955eb29f9bc7d3d434838cd729bb7e17
SHA512 39afa534b862f9faebb4aa1ff4144a7d53f62adfd389531f75bdf10865fe8d846e79b3138ec90f2e9d4eb92a72e7a856f0c7be857a892a54eb2f2503f3030d10
SSDEEP 24576:39O/bmU++vQu1TL9yJ5d2m8y7i1HlcoGpJ042jJpUeBk2h:3k/X+75dAyMGDP2dpUYXh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14489

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

516KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

84KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$TEMP/Competent

SHA256 609b33673ba3698de21d56bce0a871d9d96269c7d86bc087419610452675a90e
MD5 d79ddda7e49b51bb69f59808170a5e63
SHA1 b791857ae7b920d50f2fc97f0895f289c6a9e8bd
SHA512 4f977ba99b3f88d60380f81efc0b74bbe4ae29573e0e8caf0f5899e83f29be895391ff374a0e557b5be4eecd241829a442c92fa72f5dddcb440a45cc4356a157
SSDEEP 1536:2fV6ysLAsot6A5to2ocZ/3QRI6ySIBORLPcV+MJCP7Jay/R0ulyd0g31RQhc:2wycAsa5jvQRIwV9P3MJCToqLycG
MD5 SHA1 SHA512 SSDEEP

$TEMP/Corporate

SHA256 1a8d43ecf42d62c9f4dfdad24c25136a028760a19cf4fd27336bfbb0962426b9
MD5 57b8ab1323416077ed8bb346dd2daa09
SHA1 43116dae9716caf4e7f43943a89e357204c842f8
SHA512 1899d8ce43c0e18ff3d7ea833680921a717d098fd2c4f8f5ded7007aa31f9946d6895f65364b17ba7da2f77afa5ef3782eefce562314776bc7fc8b5cb45b1f37
SSDEEP 768:EFzQqu3JDyFgqUKY0iJ+m7L/Z+67tnwlmxbJYMzwExLG//rxJrjRmq2Q04SMtO9O:JegqUKYyiL/Z+6ZwQz38ExUVJ8ZpLw
MD5 SHA1 SHA512 SSDEEP

$TEMP/Honda

SHA256 5c1046ea8e740faaaf01e2818ebf5cea15d398594a26b8bb76e8b3da6dbd1bba
MD5 cef464062b7e5b404539d0c443917907
SHA1 01802c968d8917fab13d71bfe4ed62e36e965745
SHA512 a5e335a7be3bc40b5dd30e40813bae8cd51761c2bfb8d4e2b6ad067cf8dd429aec85ad70534780de6d8fa8e996f310fb3d73334c83eb6ec92816c497c303e6b5
SSDEEP 384:5xhQAQODXaKbsPsE7B7lZstjTicMXKtVt:TJQODXa4MBrUGXKtb
MD5 SHA1 SHA512 SSDEEP

$TEMP/Itsa

SHA256 2739a9b72a38c08a6385701c6bafeb7fdd7fae8b33ace80732ec934ec8518c6c
MD5 20ca365e882b4c4a95b110e62f8a4c08
SHA1 662e9b589d89de106713f361d8b2536740554785
SHA512 9682a8935932673b2c1c5fda831c5b1e53219dbd74dbf96e483cdec68db6b31a69d714f6257c62a708bf0b6a2773f5f01efc86cb54fcc084341a862ed6e4d6fb
MD5 SHA1 SHA512

$TEMP/Reveal

SHA256 2299a0df735b5c6a171ddd6a1b009756c19ec3bb1383bef34bca8fa7f4a6cf09
MD5 d6a091e43db1334c92a9163fb999aa13
SHA1 380674ed8d23c1ec2f9a5f5b0167970b296772a7
SHA512 4142fc9995b083bc2d3d9b5c2789ea564117ed0ede14a1aa510e9b32b8fdcd149350ce8069ec168141e720d4ffaa246bc7a4585fdff4466343ca3f4d206719f8
SSDEEP 1536:L1lLilX3YfWBMdU67iXs7D2VtQZzraEA4cA19fx0+bnGiI6CJBKA/7J/fR3Wg:LXuVYwMdU6Vu8zLbcAjffzvITBfR
MD5 SHA1 SHA512 SSDEEP

$TEMP/Scottish

SHA256 da224ea0c81fd05189621037f4f0b856f47dd1fb0841d4142395f638da7eb802
MD5 ea1cfad1b98da498addad255609d0e5f
SHA1 14fa7e96806624330a8899b215550122aeb94c91
SHA512 ede7fa0fc6922366dd7319bdc0a00af36b39d506ee246a18d66641374a04727318abdc8832944995c4374487515b38017a081ffbfa17f566b1c83fac59e39442
SSDEEP 12288:vpV0etV7qtINsegA/rMyyzlcqakvAfcN9b2MyZa31tqoPTdFbgawV2501:vTxz1JMyyzlohMf1tN70aw8501
MD5 SHA1 SHA512 SSDEEP

$TEMP/Screw

SHA256 419e973c6e735bba8b60704a962e0b79d285e7a09cb317aefab1ed001a1bf344
MD5 5fc7641883018edbf0ead49af5ec3cbc
SHA1 b021e03764aa36d5b5176ab9dbd825001d9797c8
SHA512 698c1ee8137077116160e8958daabed29da1bfc2c9ce9795a5242fbd8a61fd2d425aa5722542d60f8df15c2af19a3ecb4a7d3628c9fdbf40f46a37769647eade
SSDEEP 1536:YyWwUSme91qs+wl3fncHWq54NBb1ImVq80aoQXsmoRwmYEa+xRHoBgW:nPdxqsH302q547xImVq80jRnyWugW
MD5 SHA1 SHA512 SSDEEP

$TEMP/Still

SHA256 743304691772b7f4b1254b7ec4defe408abd5380c260906ff5d51018cc51c7f4
MD5 5737221e4786a16db1d00b526a889913
SHA1 b44ef92d0f12e91e236f96359fa3667c773703ab
SHA512 0b3219ff89bd5f80aa83682c6193c8f540058262231f343ab11ebccb7849cf45b1b2850494150522479735304cd255e4bc25c1bd76a42f7482e43a3f60d000ef
SSDEEP 1536:KlyC1ycjURzts3v4p/Kqm36vqVBvybzERtSb+ERRG7XZhY+RCtw6nSWbj:ayCcts3dN6yVZybAL+3RM7XExteWbj
MD5 SHA1 SHA512 SSDEEP

$TEMP/Whom

SHA256 27dbf0e6f006ae0f7fa94cd33287e7f3ab85e1fa637636eff8e94eb649e45990
MD5 cf18a7ed11645523addbd2fbb31b014d
SHA1 09caf4ed6b6822e838d3512ce5a75e4125192c5f
SHA512 f1cfc3fbaccfcd199b99ac647a2a0f76a05a7db1b655fa2e9de44def1630bebbfdbbd814225664f2d7d7015ff73b87c02242bec5105460459694f03e836f0d56
SSDEEP 1536:AZcxT5PMfnoT5IAyrEBysFZAken7iV0myzZMJMqNW:AGXkoTCAxBysFDen7I0mKZMXc
MD5 SHA1 SHA512 SSDEEP

AlarmBatteries/Entrepreneurs

SHA256 b25e0f67c38257dbc0ab9a7d6af8870c878211abd4e51b8db52d9c3e2272652d
MD5 1c78ead3742c95a2c4df31c8d71e0f1b
SHA1 a075cca4d9d8fa5fe3ddbf1f2d6e120208cb5b17
SHA512 09a234d52b31b38a4071078abdc9a976aa58716a7ba9f1832b84966f039b621044eaaa641fdb2c919fe5334902e4dbaa8e3fd19a638583120f881cde218b9112
SSDEEP 1536:rIMLTZUD1zCXWdOfnDci2EvLSaB6SPY4DvNn9pEbRJu/dIKRFA6:rI89URzCGqnDrxv23+XD1E9s3Re6
MD5 SHA1 SHA512 SSDEEP

AlarmBatteries/Greatest

SHA256 2d081c4a75403c808336cd690598e765d1277cea32e3cea2cb7bc0e62ad35c77
MD5 043e35e2330184d548101dfdb638be96
SHA1 f73e6f2af1052b4810820c68f9693e90f6a07d6d
SHA512 d764704f01b91644df122c4eff4dba404a46bc436c45f5406509e509213306a0cded57cbbeca20a6b474c656c294a91e2ea16025b267af34f4760fc02a8d69c5
SSDEEP 1536:rh9fG5c8ghh85Az6ZgnXdrZ4QD9hZtBCyV8qmRfQQ1BXclmgWnS3lpvaww210:bZh85ynXdrPJhQj5X1BIB2SVpvawT6
MD5 SHA1 SHA512 SSDEEP

AlarmBatteries/Provides

SHA256 945d570376b997851fd74131bcf117aad625341fcb7b756409e7cb711632cb0c
MD5 72dcad57e5699dc20cb41f6ae4acd115
SHA1 cb7e6842f24319262605ea2c1bf3a7eae60358af
SHA512 5f251f25514d5d138d20b308c2c162daf9520dde28f25379d09acaf1f2fc67bcf9a3bfa62a42d83c19febfd28809e82561aa2b19614735037930964d1aa18afd
SSDEEP 1536:YTpO3XWfDyw7a9utGvuEpqKw7NmLFd6oQbQbsbLvisrIl/xbH48kVGboiW:YPfOwOutGGEpqd7Gd6/bQbILv5rC/xL6
MD5 SHA1 SHA512 SSDEEP

AlarmBatteries/Wireless

SHA256 cee5172f67cacbc90062c13713a08561b6984cb6c3c98663b7e541445b2fd492
MD5 df9a85af5771ea736a104b6e3eb86f0b
SHA1 319cb80eed888d089ab5b6944adbcbe89c3195eb
SHA512 8e7aedbe38bedf9a0c167f778eb7678b6ad73f56e1f1196eaf771c01b8d6cd2a99ff015190efcf3f7e340979e501172d2d606e3e3b9ae53873ab9244aaf10eb9
SSDEEP 1536:BPYs0v/j8Hkrp5mua/2KosFnVD6i5nckhaGx54u/zb:CsO8Hipna/l6Av
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer