d5526528363ceeb718d30bc669038759c4cd80a1d3e9c8c661b12b261dcc9e29

resource
d5526528363ceeb718d30bc669038759c4cd80a1d3e9c8c661b12b261dcc9e29

IMPHASH be41bf7b8cc010b614bd36bbca606973
SHA256 d5526528363ceeb718d30bc669038759c4cd80a1d3e9c8c661b12b261dcc9e29
MD5 2b01c9b0c69f13da5ee7889a4b17c45e
SHA1 27f0c1ae0ddeddc9efac38bc473476b103fef043
SHA512 23d4a0fc82b70cd2454a1be3d9b84b8ce7dd00ad7c3e8ad2b771b1b7cbca752c53feec5a3ac5a81d8384a9fc6583f63cc39f1ebe7de04d3d9b08be53641ec455
SSDEEP 24576:b9yEBs1ZKaxv6rRVO9VdLCjJehm4v2TeLUzguXpdQhgRQ7SoYafkW:bxqZK66rb4V0cxtQzv5dQhgRQ7SxID
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14489

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

516KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$TEMP/Streaming

SHA256 dcf4784ea71a3e1a42318c09183d4b5981009d296814d3679ca68eb0a7c9e2ef
MD5 1501de696d22f872db44b548cba0e4fa
SHA1 ed8a2948aaf041bfd0196a180f5888bdddcb9879
SHA512 fa931ce9f6ab6928cec1c999f1aa6082bd7c5c74eff317fc6b1bd0d9f88de2753e157ebd4d6a2719c5861f7fdc12bcde5859945633c1a2b8e0967684771f84bc
SSDEEP 1536:e+Gh66UDm7aBhZ/gFRE4urykxXo1NmfT8ezajmKxZGq/9EZvWZ1hEvQn9E/bbZfR:Yh6ny7aviFOBe1NDezajmlLZC1yQn9Uz
MD5 SHA1 SHA512 SSDEEP

$TEMP/Temperature

SHA256 7c16e21e29d442bf0b459d083198b22ee9c6d9926e3aa61f43dc3a1ee3ecb731
MD5 249d56cbe275c2258ccd964f0c6241d9
SHA1 8ac982fe39012b8812ed9dcf16e8e00c9a74b0bc
SHA512 440d7ff539e737e4e3b74549be7495d0f3b3230888355bc93eeca8084c80f255d988839ef455b4f6841fbaa64aabfdef9233130663aa3c24f711d01edb8e6be8
SSDEEP 1536:1HWiP7Yp/mHnQ1UpUMd4IupqP9kGoe3bpwZQnvcIwvbzZeaGFuo:1Hip/WnQ14ApqqGBbpwZQnv1kbzcnFuo
MD5 SHA1 SHA512 SSDEEP

$TEMP/Width

SHA256 8e7415ed2d0d5c6e69d6a02bc3928c9adf685a43932e4543084b917946361974
MD5 12d9ad507c856d833101c9e367466555
SHA1 b6398b345226279cfab1559bf3847e3d9526dcff
SHA512 0ba3913d4a3ca266f0812263245a25caa0bbd9b81766992c8dc05466d9cd86cb79843c53c29bb26c005ef15c0f90ab97978209038181501135a7b27fb5b34d62
SSDEEP 1536:7Tpnkz3ka65XPhQX9zj/BhrpCOFaCAuWjlTHuq6ezUkhB+op9x0:hnMUXRPOX9z9hrpdFaFu09AFdK0
MD5 SHA1 SHA512 SSDEEP

FrameJam/Asbestos

SHA256 37576e4b3a1e0004b4cf7da625b865a62d895411ed157c538f5f4cd3aa6fab7a
MD5 19121d99734080f4fdd9ca3008168360
SHA1 b00acbdd3fa952df781ca9ad5c86ded9f2d51ec6
SHA512 e2e863d19e2f560c1deb018c3c2748be170b11fcb520ed7e7ea20727646bcacb0b5c3ed04e856943c67e51f5083c90aa3dd1f8794a83901a203c8bac4fa51c92
SSDEEP 768:pQPj48UQOUiubxsOEndF1tUQy7i0l78krIt96cOkjZb/heni1jmTdwV0RlqgiaOX:pSj48u0HqxGNQ3OwbykjmTC0LwaRf4NR
MD5 SHA1 SHA512 SSDEEP

FrameJam/Ashley

SHA256 ddb7f60ab5f8957955dd20f2dc270e3ef833d3727f374a8c4c444634bd05609d
MD5 e522956891659c41bd8550b8d5e16231
SHA1 4380c8a0c30db1532728cdb72707f9f1847cc87d
SHA512 35c81ef1a2c040dbd52cad9f38fda43d8836d955b62e478ae941a4ba67d297dc1c4b40d6b30959c5d2f784d5cb0d19c795307906d52ad0e7eb72bd0e4235172f
SSDEEP 1536:9MMj34ywB5KqgcGsc5wVEiZcTtFEvO1HI3s3oHQ6:9tbE5ucfc5QDZcJh1Qst6
MD5 SHA1 SHA512 SSDEEP

FrameJam/Bet

SHA256 32b3d9d5bc58659ea524aa2cabd9cfc81b73e679e3d2cc899dfb00439612f5ff
MD5 0f3f07b667e947c4da38813d6d651e2a
SHA1 692622d5e5705f8f65db96f70d8c7c2f7fd5a640
SHA512 449ab13dd860b08570c589dc24e468dd880434c3be774ba4f078d8f116d710326fc546de621dce8a27e134f70f651d44642ec0ece37375332a7d7725e9ddcf9c
SSDEEP 1536:p3avQ59o+H306WG6NoG8vYyAHJfpshydbA:dDCAE6WGGoJvFAohyFA
MD5 SHA1 SHA512 SSDEEP

FrameJam/Ensures

SHA256 2686b284d1c21d06ab10829c16657334e13428210ccda89f68bfb8acbfc72b42
MD5 c6fa82d60cfbf9e83b4cf3cbd1f01552
SHA1 a310c3577c5e439aa306a0a5dae2c75ea39c126e
SHA512 e35a67a63fac7db37431bc0ab910a9c33a41e5a910ae79181a74aaf13ed23d65ef500a9e5a482e749cd9666c146d8403f83c6be2d9aa013d6d7c6bc0f07fac9c
SSDEEP 1536:fI3458kia8Jlj6YRC2wYIwr4fCQkZaKjZvKAQL5LUrCDdH0Qzyu:W4e3lJh6uCzNMKCBDtVWIGZUQ3
MD5 SHA1 SHA512 SSDEEP

FrameJam/Fla

SHA256 e0c1c46fa4582a3826f7aed2f7fb454d3ee42a425f214321910c25cc1d8879d5
MD5 e139e52f93ae3e19ab47f437cbe8b3de
SHA1 2d5b56c3c0a454fefbf7c7a466ad000c05258bd6
SHA512 4feba8bf6916c979fa45e16a368f22a165985e1dfd75697fd7a7534f5e64afe438206074b2f8aa884d5666e80c55544c62d5cc48f8429e7c843c01d1af060878
SSDEEP 1536:cuyEKyPM+hX1pEvTBru6C2fqwXaHXsCM34ruECVgfc7qNS8Id:1xKu9LGC2BXaH8CLru/EDId
MD5 SHA1 SHA512 SSDEEP

FrameJam/Language

SHA256 9201319c9c07e4312717845e59c9fe3a987f70575cd63e4c042db778ebe4d5e9
MD5 5de7106df85e2f96f46f642d98433ad1
SHA1 f77a8182904a897a8d41858c6f5b87c3e8b21195
SHA512 7c4b04d513e80873ea3030162702e5eff8ea17b44844ba2809805f92c6a7d6ed396ef660b78e274334448f31c447f26212c6779e801f330611d6a01f04449047
SSDEEP 1536:45p8F8NfFPhjAjmtfoxAZM81pPb7kaGIWLWvzigna6zendSrfBp:SvtAWAx+M819pZWLa+ndeBp
MD5 SHA1 SHA512 SSDEEP

FrameJam/Navy

SHA256 68e9a8d57ba2a484dd28a1afed5262a86aff4d81467b93b4072f329fab984f4c
MD5 d4eb107cfd9fc38ed7e7b253562e155a
SHA1 7fc17c27c9f4739c19211600398bf1ee9df84dc5
SHA512 3a95c48e7a61239cbaa857459a6a106536dfd8190205275e2549a9939116833141276dd5b6c81ff337d2340eedba633d9ca01a03fb490eb27184becc97626e0f
SSDEEP 1536:SKmS/F6SnG9rlnrMRBVty70dau0yjlifFQEsxdpy:SK2l9xMRfY7saujZimEsxK
MD5 SHA1 SHA512 SSDEEP

FrameJam/Participants

SHA256 7cbd6810cb4dd516eeb75df79d1db55f74471c11594333ac225f24bfc0fca7ca
MD5 f0e725addf4ec15a56aa0bde5bd8b2a7
SHA1 1f54a49195d3f7fd93c5fec06cc5904c57995147
SHA512 00f14e435e0f8396f6c94fd5ace3f3645e87511b9e41e8c7c7caadb751ed826f60362ac007c80e9c3bd16f8f31b3a9107cbb39bf5c26d20a0ab5129e695f5269
MD5 SHA1 SHA512

FrameJam/Rick

SHA256 27014daa44b8b92e1684970350c43bb1701d3a592572e650e1e00be1470e5f77
MD5 e0d37e7b879f4b4e0dde5006da5009bd
SHA1 33d19bdb8a0ae45a38ab6899381ca8bc1ea7c1a5
SHA512 68b2f357b3f02f3181df095ddc6fe8ff1810a150e832c245e428f973a096301b1d13fce00ad28af662c4aea371f872d56348fe7b5d2070ed3f1c49388efd3f60
SSDEEP 12288:OpV0etV7qtINsegA/rMyyzlcqakvAfcN9b2MyZa31tqoPTdFbgawV2501:OTxz1JMyyzlohMf1tN70aw8501
MD5 SHA1 SHA512 SSDEEP

FrameJam/Viruses

SHA256 98232a6528beb079d8fa9d77751722159d4974e6859df867efb3ba7a3eec4bec
MD5 7c9dd6f9fa719321b72805df762a82da
SHA1 64b135116d963e47848e29a002a3207bc01ab2c0
SHA512 480d16e0d1e5021b9042378df235323324fc8341461e59d117471aa0da07fe8ef6367d0e14479b4bbb854f29d1f092ba3e9776fa2bf56b34ab73f5a858e6b3d0
SSDEEP 1536:BPKqba/VOmFEskJ/1ZiMJf9a1+y2bLt5ftfsCdUZFzE13jrDFMj/LdcdslzaqUAz:wF/VOuEDiSfocy2Pt5ftfEPzsz1E/LdH
MD5 SHA1 SHA512 SSDEEP

PendingFotos/Emotions

SHA256 2bc28afb291ece550a7cd2d0c5c060730eb1981d1cf122558d6971526c637eb4
MD5 b98d78c3abe777a5474a60e970a674ad
SHA1 079e438485e46aff758e2dff4356fdd2c7575d78
SHA512 6218413866237bc1f6eada6554658a00c9fc55402e104576b33a2e8d4adf0fd952d8cc8d1ae3a02ebcfa030115fc388fc1a6f23b9d372f808e11e1b551064e5d
SSDEEP 384:vLaGlKPODYuBO3zViP3suELSs/APtOSFaOMJJj0xJUb+OeFB2l5UWiSiSK:vLaVWYn3isuELD/OtOHTCOcBS59isK
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer