Hash_Suite_Free_3_7[.]zip

Resubmissions

24-09-2024 12:54

240924-p5bh6avhpn 9

24-09-2024 12:52

240924-p4hwvayfpb 3

Sharing

Copy URL

Twitter E-mail

General

Target

Hash_Suite_Free_3_7.zip
Size

19.1MB
MD5

500c7921c82b552ebe1b4f6982bfaabf
SHA1

dbee833e06bd7c8f74f455b96e622aa68e7f55bc
SHA256

341c878d83d09b98f867973f2ae8a93203ed8c6045fb1f4b8b6961b15139e118
SHA512

8a0bd47f6718af5dfb20f0cc8071ff9ef51c692f8a656ec26d26b44748bef5d818706a8d34db7b11d8326325b78988e295c9133595fde17fbfc1f9a6a842af86
SSDEEP

393216:xYkouWXF18+SLq/k/h57je8/+fuakvq0MCCbHohS9IuDJPfjFYSU/aYVuEfRBEK:+uuNk/HGamkdM7LohS9BdPf6SeaqfRv

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/Hash_Suite_Free/Hash_Suite_32.exe
unpack001/Hash_Suite_Free/Hash_Suite_64.exe
unpack001/Hash_Suite_Free/Tools/Backup_Registry.exe
unpack001/Hash_Suite_Free/Tools/Hashes_Dump_32.exe
unpack001/Hash_Suite_Free/Tools/Hashes_Dump_64.exe
unpack001/Hash_Suite_Free/Tools/ResetDB.exe

Files

Hash_Suite_Free_3_7.zip
.zip
Hash_Suite_Free/Hash_Suite.chm
.chm
Hash_Suite_Free/Hash_Suite_32.exe
.exe windows:5 windows x86 arch:x86

fa3be4bbbe30c40e35e25847cb85eb04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

esent

JetRetrieveColumn
JetEndSession
JetMakeKey
JetAttachDatabase
JetDetachDatabase
JetGetSystemParameter
JetCloseDatabase
JetMove
JetCreateInstance
JetOpenTable
JetBeginSession
JetInit
JetGetDatabaseFileInfo
JetGetTableColumnInfo
JetOpenDatabase
JetTerm
JetSeek
JetCloseTable
JetSetSystemParameter

rpcrt4

UuidCreateSequential

advapi32

MD5Update
MD5Final
MD5Init
CryptGenRandom
SystemFunction032
SystemFunction025
CryptGetHashParam
CryptSetKeyParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
SystemFunction005
CryptAcquireContextA
CryptDestroyKey
CryptImportKey
CryptSetHashParam
CryptDuplicateKey
LsaClose
LsaOpenPolicy
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
CryptReleaseContext
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
LsaQueryInformationPolicy

kernel32

SetErrorMode
GetFileAttributesExA
GetFileSizeEx
GetCurrentDirectoryW
FindFirstFileExA
CreateDirectoryW
GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
LCMapStringW
CompareStringW
GetDateFormatW
SetStdHandle
HeapQueryInformation
IsValidCodePage
GetCommandLineW
GetCommandLineA
VirtualQuery
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
GetLocalTime
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
SearchPathA
RtlUnwind
GetTempFileNameA
GetFileTime
GetWindowsDirectoryA
GetTimeFormatW
WriteConsoleW
GetDriveTypeW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
EnterCriticalSection
WriteFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
SetEndOfFile
UnmapViewOfFile
Sleep
CreateFileA
CloseHandle
CreateFileMappingA
GetFileSize
MapViewOfFile
WaitForSingleObject
GetExitCodeThread
TerminateThread
CreateThread
VirtualFree
VirtualAlloc
GlobalMemoryStatusEx
QueryPerformanceFrequency
QueryPerformanceCounter
ReadFile
CreateFileW
GetLastError
GetVersionExA
SizeofResource
HeapFree
InitializeCriticalSectionAndSpinCount
HeapSize
LockResource
HeapReAlloc
RaiseException
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
WideCharToMultiByte
GetProfileIntA
GetStringTypeExA
lstrcmpiA
DuplicateHandle
GetVolumeInformationA
GetACP
GetCPInfo
GetOEMCP
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentDirectoryA
GlobalReAlloc
GetThreadLocale
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
ResumeThread
SuspendThread
CreateEventA
lstrcmpA
CopyFileA
GlobalSize
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
GlobalFree
LocalAlloc
ExitThread
LocalFree
FindResourceExW
MulDiv
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
GetModuleFileNameW
FindResourceA
TerminateProcess
InitializeSListHead
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
CreateEventW
ResetEvent
SetEvent
FlushFileBuffers
GetTickCount
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetCurrentProcessId
LockFileEx
UnlockFile
HeapCompact
LoadLibraryW
DeleteFileW
WaitForSingleObjectEx
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
HeapValidate
GetVersionExW
GetCurrentThreadId
GetFileAttributesW
CreateMutexW
GetTempPathW
UnlockFileEx
GetFullPathNameA
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
InterlockedCompareExchange
GetFullPathNameW
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
GetProcessTimes
GlobalUnlock
CreateProcessA
GlobalLock
GlobalAlloc
MultiByteToWideChar
GetSystemTimes
InterlockedDecrement
SetPriorityClass
GetExitCodeProcess
DeleteFileA
GetFileAttributesA
WaitNamedPipeA
ReleaseMutex
CreateMutexA
GetModuleFileNameA
GetComputerNameA
FreeLibrary
GetProcAddress
GetSystemInfo
GetNativeSystemInfo
LoadLibraryA
GetModuleHandleA
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetLastError

user32

TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
LoadMenuW
SetClassLongA
ModifyMenuA
DestroyAcceleratorTable
CharUpperA
SetMenuDefaultItem
GetMenuItemInfoA
DeleteMenu
GetSystemMenu
IsClipboardFormatAvailable
TrackMouseEvent
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
SetParent
UnionRect
LockWindowUpdate
GetUpdateRect
GetAsyncKeyState
GetDoubleClickTime
LoadImageW
RegisterClipboardFormatA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
DestroyMenu
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
MessageBeep
ShowOwnedPopups
TranslateMessage
GetMessageA
PostQuitMessage
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
GetIconInfo
CopyImage
LoadImageA
DestroyIcon
WindowFromPoint
SetCursor
GetNextDlgGroupItem
MapVirtualKeyA
GetKeyNameTextA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuState
GetMenuStringA
SetRect
EnumDisplayMonitors
GetMenuDefaultItem
LoadCursorA
SetLayeredWindowAttributes
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
IsDialogMessageA
SetWindowTextA
UpdateLayeredWindow
FrameRect
CopyIcon
EnableWindow
GetCursorPos
IsWindowEnabled
SendDlgItemMessageA
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
SetDlgItemInt
MoveWindow
ShowWindow
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassLongA
SetWindowLongA
GetWindowLongA
EqualRect
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
RealChildWindowFromPoint
MapDialogRect
GetDialogBaseUnits
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
CopyAcceleratorTableA
PostThreadMessageA
WaitMessage
EnumChildWindows
SubtractRect
GetComboBoxInfo
GetForegroundWindow
SetActiveWindow
IsCharLowerA
MapVirtualKeyExA
CreateMenu
GetWindowRgn
DestroyCursor
LoadCursorW
ReleaseCapture
UnregisterClassA
GetClientRect
SystemParametersInfoA
SetCapture
SendMessageA
GetMonitorInfoA
ClientToScreen
CopyRect
RedrawWindow
OffsetRect
DrawIcon
GetClassNameA
GetSystemMetrics
InflateRect
GetWindowRect
TrackPopupMenu
GetWindow
MonitorFromPoint
UpdateWindow
MessageBoxA
RegisterWindowMessageA
PostMessageA
SetCursorPos
InvalidateRect
KillTimer
FlashWindowEx
SetRectEmpty
SetClipboardData
EmptyClipboard
CloseClipboard
SetTimer
OpenClipboard
IsWindow
GetFocus
IsIconic
PtInRect
GetParent
DrawFrameControl
IsWindowVisible
IsZoomed
DrawStateA
FillRect
CharUpperBuffA
IsRectEmpty
LoadBitmapW
SetWindowRgn
MapWindowPoints
GetSysColor
IntersectRect
DrawIconEx
DrawEdge
GetSysColorBrush
DrawFocusRect
DispatchMessageA
PeekMessageA
GetMessagePos
GetMessageTime
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetDlgCtrlID
SetFocus
GetKeyState
GetCapture
GetMenu
SetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount

gdi32

PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
LineTo
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
RoundRect
Rectangle
CopyMetaFileA
CreateDCA
GetDIBits
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
SetRectRgn
DPtoLP
CreatePalette
GetPaletteEntries
GetRgnBox
OffsetRgn
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetDeviceCaps
GetClipBox
ExcludeClipRect
Escape
GetObjectA
CreateFontIndirectA
DeleteDC
GetStockObject
DeleteObject
GetTextColor
CreatePen
CreateRectRgnIndirect
CreateSolidBrush
GetTextExtentPoint32A
BitBlt
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgn
CreateRoundRectRgn
GetBkColor
PatBlt
SelectObject
CreateDIBSection
CreatePolygonRgn
CreateEllipticRgn
CreateHatchBrush
Ellipse
ExtTextOutA
Polygon
Polyline
GetTextMetricsA
SetBkColor
SetTextColor
CreateBitmap
SetWindowOrgEx
CreatePatternBrush

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

shell32

SHGetPathFromIDListA
ShellExecuteA
ShellExecuteExA
SHGetFolderPathA
DragQueryFileA
DragFinish
SHAppBarMessage
SHAddToRecentDocs
SHGetDesktopFolder
SHBrowseForFolderA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetMalloc

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootA
ord432
ord156
SHStrDupW
StrCpyW
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
StrFormatKBSizeA
PathIsUNCA

uxtheme

OpenThemeData
GetThemeColor
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
CloseThemeData
GetWindowTheme
GetThemeSysColor
DrawThemeParentBackground
DrawThemeBackground
IsAppThemed
GetCurrentThemeName

ole32

OleLockRunning
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoRegisterMessageFilter
CoRevokeClassObject
CoDisconnectObject
CoInitializeEx
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleIsCurrentClipboard
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CoSetProxyBlanket
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
OleFlushClipboard
CoCreateGuid
PropVariantClear

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
VariantCopy
VarBstrFromDate
LoadTypeLi
SysStringLen
SysAllocStringByteLen
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
VariantClear
SysAllocString

oledlg

ord8

gdiplus

GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipGetImagePaletteSize
GdipSetInterpolationMode
GdipCreateBitmapFromScan0

netapi32

NetApiBufferFree
NetUserEnum
NetServerEnum

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 751KB - Virtual size: 751KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 218KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Hash_Suite_Free/Hash_Suite_64.exe
.exe windows:6 windows x64 arch:x64

5c457521f680131aac6c0f92028e3c75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

esent

JetBeginSessionA
JetRetrieveColumn
JetEndSession
JetMakeKey
JetSetSystemParameterA
JetGetSystemParameterA
JetOpenDatabaseA
JetMove
JetCloseTable
JetGetTableColumnInfoA
JetAttachDatabaseA
JetGetDatabaseFileInfoA
JetInit
JetTerm
JetCreateInstanceA
JetSeek
JetOpenTableA
JetCloseDatabase
JetDetachDatabaseA

rpcrt4

UuidCreateSequential

advapi32

MD5Update
MD5Final
MD5Init
CryptGenRandom
SystemFunction032
SystemFunction025
CryptGetHashParam
CryptSetKeyParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
SystemFunction005
CryptAcquireContextA
CryptDestroyKey
CryptImportKey
CryptSetHashParam
CryptDuplicateKey
LsaClose
LsaOpenPolicy
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
CryptReleaseContext
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
LsaQueryInformationPolicy

kernel32

GetStringTypeExA
GetProfileIntA
SearchPathA
FindResourceExW
GetWindowsDirectoryA
GetFileTime
GetTempFileNameA
SetErrorMode
GetFileAttributesExA
GetACP
GetTimeZoneInformation
GetConsoleCP
CompareStringW
GetTimeFormatW
GetDateFormatW
SetStdHandle
HeapQueryInformation
IsValidCodePage
GetCommandLineW
GetCommandLineA
VirtualQuery
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
GetLocalTime
ExitProcess
TerminateProcess
FreeLibraryAndExitThread
ExitThread
RtlPcToFileHeader
RtlUnwindEx
lstrcmpiA
DuplicateHandle
LCMapStringW
GetCPInfo
GetOEMCP
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentDirectoryA
GlobalReAlloc
GetThreadLocale
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
ResumeThread
SuspendThread
CreateEventA
lstrcmpA
CopyFileA
GlobalSize
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
GlobalFree
MulDiv
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetVolumeInformationA
EncodePointer
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
GetModuleFileNameW
FindResourceA
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
GetTickCount
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetCurrentProcessId
LockFileEx
UnlockFile
HeapCompact
LoadLibraryW
DeleteFileW
WaitForSingleObjectEx
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
HeapValidate
GetCurrentThreadId
GetFileAttributesW
CreateMutexW
GetTempPathW
UnlockFileEx
GetFullPathNameA
InitializeCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
GetProcessTimes
GlobalUnlock
CreateProcessA
GlobalLock
GlobalAlloc
MultiByteToWideChar
GetSystemTimes
SetPriorityClass
GetExitCodeProcess
DeleteFileA
GetFileAttributesA
WaitNamedPipeA
ReleaseMutex
CreateMutexA
GetModuleFileNameA
GetComputerNameA
FreeLibrary
GetProcAddress
GetSystemInfo
GetNativeSystemInfo
GetVersionExA
LoadLibraryA
GetModuleHandleA
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetLastError
LocalFree
LocalAlloc
WideCharToMultiByte
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
FindResourceW
LoadResource
RaiseException
HeapReAlloc
LockResource
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
SizeofResource
GetLastError
CreateFileW
ReadFile
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalMemoryStatusEx
VirtualAlloc
VirtualFree
CreateThread
TerminateThread
GetExitCodeThread
WaitForSingleObject
MapViewOfFile
GetFileSize
CreateFileMappingA
CloseHandle
AcquireSRWLockExclusive
CreateFileA
ReleaseSRWLockExclusive
Sleep
UnmapViewOfFile
SetEndOfFile
SetFilePointer
WriteFile
InitializeSRWLock
CreateDirectoryW
FindFirstFileExW
FindNextFileW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetDriveTypeW
GetCurrentDirectoryW
WriteConsoleW
GetFileSizeEx
RtlUnwind

user32

GetKeyNameTextA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuState
GetMenuStringA
SetRect
EnumDisplayMonitors
LoadCursorW
LoadCursorA
SetLayeredWindowAttributes
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
SetDlgItemInt
MoveWindow
ShowWindow
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
GetWindowLongA
EqualRect
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
MapVirtualKeyA
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenuItemBitmaps
GetMenu
GetCapture
GetKeyState
GetMenuCheckMarkDimensions
SetMenuItemInfoA
PostQuitMessage
GetMessageA
TranslateMessage
ShowOwnedPopups
MessageBeep
BringWindowToTop
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
IntersectRect
LoadBitmapW
DrawIconEx
DrawFocusRect
GetSysColorBrush
GetSysColor
MapWindowPoints
SetWindowRgn
DrawEdge
IsRectEmpty
FillRect
DrawStateA
IsZoomed
IsWindowVisible
DrawFrameControl
GetParent
PtInRect
IsIconic
GetFocus
IsWindow
OpenClipboard
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
CreatePopupMenu
DestroyMenu
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatA
LoadImageW
GetDoubleClickTime
GetAsyncKeyState
GetUpdateRect
MapDialogRect
SetTimer
CloseClipboard
GetNextDlgGroupItem
SetCursor
WindowFromPoint
DestroyIcon
LoadImageA
CopyImage
GetIconInfo
GetWindowThreadProcessId
CheckMenuItem
TrackPopupMenu
EnableMenuItem
LockWindowUpdate
EnableWindow
GetCursorPos
ReleaseCapture
UnregisterClassA
GetClientRect
SystemParametersInfoA
SetCapture
SendMessageA
GetMonitorInfoA
ClientToScreen
CopyRect
RedrawWindow
OffsetRect
DrawIcon
GetClassNameA
GetSystemMetrics
InflateRect
GetWindowRect
GetWindow
MonitorFromPoint
UpdateWindow
RegisterWindowMessageA
PostMessageA
MessageBoxA
SetCursorPos
InvalidateRect
KillTimer
FlashWindowEx
SetRectEmpty
SetClipboardData
EmptyClipboard
UnionRect
SetParent
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
TrackMouseEvent
IsClipboardFormatAvailable
GetSystemMenu
DeleteMenu
GetMenuItemInfoA
SetMenuDefaultItem
CharUpperA
DestroyAcceleratorTable
ModifyMenuA
SetClassLongPtrA
LoadMenuW
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
GetMenuDefaultItem
CopyIcon
UpdateLayeredWindow
FrameRect
DestroyCursor
GetWindowRgn
CreateMenu
MapVirtualKeyExA
IsCharLowerA
CharUpperBuffA
GetComboBoxInfo
SubtractRect
RealChildWindowFromPoint
WaitMessage
PostThreadMessageA
CopyAcceleratorTableA
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
GetDialogBaseUnits
SetMenu
EnumChildWindows

gdi32

PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
LineTo
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
RoundRect
Rectangle
CopyMetaFileA
CreateDCA
GetDIBits
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
SetRectRgn
DPtoLP
GetRgnBox
OffsetRgn
CreatePalette
GetPaletteEntries
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetDeviceCaps
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreateBitmap
SetTextColor
SetBkColor
GetTextMetricsA
CreateDIBSection
SelectObject
CreateRoundRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
Polyline
Polygon
CreatePolygonRgn
ExtTextOutA
PatBlt
GetBkColor
Ellipse
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
GetTextExtentPoint32A
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
GetTextColor
DeleteObject
GetStockObject
DeleteDC
CreateFontIndirectA
SetWindowOrgEx
GetObjectA

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

shell32

DragFinish
SHGetFolderPathA
SHGetMalloc
ShellExecuteA
SHAppBarMessage
SHAddToRecentDocs
DragQueryFileA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
ShellExecuteExA
SHGetPathFromIDListA

comctl32

InitCommonControlsEx

shlwapi

StrFormatKBSizeA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
StrCpyW
ord156
ord432

uxtheme

GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
GetWindowTheme
GetThemeSysColor
DrawThemeParentBackground
IsAppThemed
GetCurrentThemeName
GetThemeColor
CloseThemeData
OpenThemeData
DrawThemeBackground

ole32

OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
OleLockRunning
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoDisconnectObject
CoInitializeEx
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoSetProxyBlanket
CoTaskMemFree
CoTaskMemAlloc
PropVariantClear
CoCreateInstance
CoUninitialize
CoInitialize
CoRevokeClassObject

oleaut32

VariantCopy
VarBstrFromDate
LoadTypeLi
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocStringLen
VariantInit
SysAllocString
VariantClear

oledlg

ord8

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

netapi32

NetApiBufferFree
NetUserEnum
NetServerEnum

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.const
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Hash_Suite_Free/Phrases/en_words_used_in_phrases_ordered.txt
.vbs
Hash_Suite_Free/Phrases/fingerprint_common_basic.txt
.vbs
Hash_Suite_Free/Reports/Attacks.jasper
Hash_Suite_Free/Reports/Hashes_Found.jasper
Hash_Suite_Free/Reports/ReportAppMain.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/commons-LICENSE.txt
Hash_Suite_Free/Reports/ReportAppMain_lib/commons-NOTICE.txt
Hash_Suite_Free/Reports/ReportAppMain_lib/commons-beanutils-1.8.2.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/commons-collections-3.2.1.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/commons-digester-1.7.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/commons-logging-1.1.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/iText-2.1.7-LICENSE.txt
Hash_Suite_Free/Reports/ReportAppMain_lib/iText-2.1.7.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/jasperreports-3.7.5.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/jasperreports-LICENSE.txt
Hash_Suite_Free/Reports/ReportAppMain_lib/jasperreports-chart-themes-3.7.4.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/jaxen-1.1.1-LICENSE.txt
Hash_Suite_Free/Reports/ReportAppMain_lib/jaxen-1.1.1.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/jcommon-1.0.15-LICENSE.txt
Hash_Suite_Free/Reports/ReportAppMain_lib/jcommon-1.0.15.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/jfreechart-1.0.12-LICENSE.txt
Hash_Suite_Free/Reports/ReportAppMain_lib/jfreechart-1.0.12.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/jxl-2.6-LICENSE.txt
Hash_Suite_Free/Reports/ReportAppMain_lib/jxl-2.6.10.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/spring.jar
.jar
Hash_Suite_Free/Reports/ReportAppMain_lib/sqlitejdbc-v056.jar
.jar
Hash_Suite_Free/Reports/WordList.jasper
Hash_Suite_Free/Reports/reportIcon.png
.png
Hash_Suite_Free/Samples/sample_bcrypt.txt
Hash_Suite_Free/Samples/sample_dcc.txt
Hash_Suite_Free/Samples/sample_dcc2.txt
Hash_Suite_Free/Samples/sample_md5crypt.txt
Hash_Suite_Free/Samples/sample_pwdump.txt
Hash_Suite_Free/Samples/sample_raw_md5.txt
Hash_Suite_Free/Samples/sample_raw_sha1.txt
Hash_Suite_Free/Samples/sample_raw_sha256.txt
Hash_Suite_Free/Samples/sample_raw_sha512.txt
Hash_Suite_Free/Samples/sample_sha256crypt.txt
Hash_Suite_Free/Samples/sample_sha512crypt.txt
Hash_Suite_Free/Samples/sample_ssha.txt
Hash_Suite_Free/Samples/sample_wpa_psk.txt
Hash_Suite_Free/Samples/wpa-Induction.pcap
Hash_Suite_Free/Samples/wpa-psk-linksys.cap
Hash_Suite_Free/Samples/wpa.cap
Hash_Suite_Free/Samples/wpa2-psk-linksys.cap
Hash_Suite_Free/Samples/wpa2.eapol.cap
Hash_Suite_Free/Samples/wpa_Network_Join_Nokia_Mobile.pcap
Hash_Suite_Free/Samples/wpa_captures_README.txt
Hash_Suite_Free/Tools/Backup_Registry.exe
.exe windows:5 windows x86 arch:x86

78f73871a64d62f950aaaa3764ca4ae3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Alain\Desktop\Repositories\Hash_Suite\Release\Tools\Backup_Registry.pdb

Imports

kernel32

WaitForSingleObject
CloseHandle
CreateProcessA
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Hash_Suite_Free/Tools/CredDump_32.dat
Hash_Suite_Free/Tools/CredDump_64.dat
Hash_Suite_Free/Tools/Hashes_Dump_32.exe
.exe windows:5 windows x86 arch:x86

b588953ab6b46fffb3de335064b0c5a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WriteProcessMemory
CloseHandle
GetModuleFileNameA
LoadLibraryA
VirtualAllocEx
CopyFileA
GetProcAddress
Sleep
VirtualFreeEx
OpenProcess
CreateRemoteThread
WaitForSingleObject
GetCurrentProcess
FreeLibrary
GetNativeSystemInfo
CreateFileW
HeapSize
WriteConsoleW
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryW
RtlUnwind
IsProcessorFeaturePresent
HeapReAlloc
SetStdHandle
FlushFileBuffers

advapi32

OpenServiceA
AdjustTokenPrivileges
OpenSCManagerA
SetServiceStatus
CryptGenRandom
QueryServiceStatus
CryptAcquireContextA
LookupPrivilegeValueA
StartServiceA
CryptReleaseContext
CreateServiceA
RegisterServiceCtrlHandlerA
DeleteService
StartServiceCtrlDispatcherA
OpenProcessToken
CloseServiceHandle

netapi32

NetShareEnum
NetApiBufferFree

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Hash_Suite_Free/Tools/Hashes_Dump_64.exe
.exe windows:5 windows x64 arch:x64

ea185e67d24c67c577476f761e5c2cd9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteFileA
WriteProcessMemory
CloseHandle
GetModuleFileNameA
LoadLibraryA
VirtualAllocEx
CopyFileA
GetProcAddress
Sleep
VirtualFreeEx
OpenProcess
CreateRemoteThread
WaitForSingleObject
GetCurrentProcess
FreeLibrary
CreateFileW
HeapSize
WriteConsoleW
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DecodePointer
TerminateProcess
HeapSetInformation
GetVersion
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryW
HeapReAlloc
SetStdHandle
FlushFileBuffers

advapi32

OpenServiceA
AdjustTokenPrivileges
OpenSCManagerA
SetServiceStatus
CryptGenRandom
QueryServiceStatus
CryptAcquireContextA
LookupPrivilegeValueA
StartServiceA
CryptReleaseContext
CreateServiceA
RegisterServiceCtrlHandlerA
DeleteService
StartServiceCtrlDispatcherA
OpenProcessToken
CloseServiceHandle

netapi32

NetShareEnum
NetApiBufferFree

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Hash_Suite_Free/Tools/ResetDB.exe
.exe windows:5 windows x86 arch:x86

926c3989fb1d66bcdb8816833cc05b66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Alain\Desktop\Repositories\Hash_Suite\Release\Tools\ResetDB.pdb

Imports

kernel32

Sleep
DeleteFileA
CloseHandle
CreateProcessA
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Hash_Suite_Free/Wordlists/wordlist_small.lst
.vbs

Resubmissions

Sharing

General

Malware Config

Signatures

Files

fa3be4bbbe30c40e35e25847cb85eb04

Headers

DLL Characteristics

File Characteristics

Imports

esent

rpcrt4

advapi32

kernel32

user32

gdi32

msimg32

winspool.drv

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

netapi32

oleacc

imm32

winmm

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 751KB - Virtual size: 751KB

.data Size: 71KB - Virtual size: 146KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 218KB - Virtual size: 217KB

5c457521f680131aac6c0f92028e3c75

Headers

DLL Characteristics

File Characteristics

Imports

esent

rpcrt4

advapi32

kernel32

user32

gdi32

msimg32

winspool.drv

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

netapi32

oleacc

imm32

winmm

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 86KB - Virtual size: 181KB

.pdata Size: 155KB - Virtual size: 154KB

.const Size: 1KB - Virtual size: 1KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 77KB - Virtual size: 77KB

78f73871a64d62f950aaaa3764ca4ae3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 42KB - Virtual size: 42KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 751KB - Virtual size: 751KB

.data
Size: 71KB - Virtual size: 146KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 218KB - Virtual size: 217KB

.text
Size: 4.3MB - Virtual size: 4.3MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 86KB - Virtual size: 181KB

.pdata
Size: 155KB - Virtual size: 154KB

.const
Size: 1KB - Virtual size: 1KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 77KB - Virtual size: 77KB

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 5KB - Virtual size: 13KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 1024B - Virtual size: 824B

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 56KB - Virtual size: 56KB

.reloc
Size: 4KB - Virtual size: 3KB