0be92678192ce14fd6e955862a38f79f_JaffaCakes118

resource
0be92678192ce14fd6e955862a38f79f_JaffaCakes118
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/AutoUpdater.exe
unpack001/Importer AUKCJE FM.exe
unpack001/uninst.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 704125e6f1e6af4404e67508fa6ede727f457f8083bbe960fd0248cc6673c3ac
MD5 0be92678192ce14fd6e955862a38f79f
SHA1 5fa6f3daf422c13bda8ec1201bfa6be78703565f
SHA512 9a90402b662a21ba11bf8ee20b6db08fcaa59a906ac9c0d8fc76c4b94fd8a2c107d677b1aa8ccb3a72b2a7dbdf20f54e1ed8a9ded0faaffb4db5d1a1c7b51020
SSDEEP 98304:K2KoM0JzE74N9inbyO7+nJR57k6fniijfYqHaxkC7aRIW:KIP1E74Cb/+l7k6fniibMxy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13333

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$PLUGINSDIR/InstallOptions.dll

IMPHASH cd90e33ffbc335413a25300c682c83df
SHA256 fa8de036b1d9bb06be383a82041966c73473fc8382d041fb5c1758f991afeae7
MD5 67d8f4d5acdb722e9cb7a99570b3ded1
SHA1 f4a729ba77332325ea4dbdeea98b579f501fd26f
SHA512 03999cc26a76b0de6f7e4e8a45137ee4d9c250366ac5a458110f00f7962158311eea5f22d3ee4f32f85aa6969eb143bdb8f03ca989568764ed2bc488c89b4b7f
SSDEEP 192:CsIZHdT9uwYX94kYd2iCzHR+yK7imphLAykycpKPd5m78ozxGUWumle:CsUHd9GN2d2iwl0impATIPdA78Ov6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7419

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrcmpiW GetModuleHandleW GlobalLock GlobalUnlock GetCurrentDirectoryW SetCurrentDirectoryW GetPrivateProfileIntW GetPrivateProfileStringW lstrcatW WritePrivateProfileStringW lstrcpynW lstrlenW lstrcpyW GlobalFree GlobalAlloc

user32

OpenClipboard DestroyIcon LoadCursorW DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW ShowWindow SetWindowLongW GetClientRect SetWindowRgn LoadIconW LoadImageW CreateWindowExW MapDialogRect GetClipboardData GetWindowRect CreateDialogParamW EnableMenuItem GetSystemMenu EnableWindow GetDlgItem SetCursor DrawTextW GetWindowLongW DrawFocusRect CallWindowProcW PostMessageW wsprintfW CharNextW MessageBoxW CloseClipboard GetDlgCtrlID MapWindowPoints SetWindowPos PtInRect GetWindowTextW SetWindowTextW SendMessageW DestroyWindow

gdi32

SelectObject CreateRectRgn GetObjectW CombineRgn DeleteObject CreateCompatibleDC GetDIBits SetTextColor

shell32

SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteW SHGetDesktopFolder

comdlg32

GetOpenFileNameW CommDlgExtendedError GetSaveFileNameW

ole32

CoTaskMemFree

$PLUGINSDIR/ioSpecial.ini

SHA256 689a67b30946cbe12dce92d17207ec0488e850a806be608e6fb174f853f86b57
MD5 6f98fcda445825382121e480a64ae24c
SHA1 d5071f4928fc8c38fc8d015501bfc1f4229b1799
SHA512 68cb5b4ec06e4955ea8b5208f5f8569a37120c185dc9a10966c89ab5fd2bb0c6038d901d7b0fd15b1db8409a2b1ede18451f3d09cb17156a14fe4940095a7d0d
MD5 SHA1 SHA512

$PLUGINSDIR/modern-wizard.bmp

SHA256 b3831952fb71804b7dbf0537bf145fd8dde94944f58218e05a261e26ef7244cd
MD5 31321b9db410ac5f22d24cf34f2776f9
SHA1 c9a46b42beace641adc698cd0d402cb86db10064
SHA512 4ac11dddd840ad282fb1365331d34c727c7fc7c41d4db502079076d352bf0d1320c3acb09916eeb889d40485527bbab930f0b58a386d82c3bfa41330f03238e5
SSDEEP 768:p+Mn9Bmt8sXwCtYyBmwaI4GFY2aZncveNY57F7PL3SW3z+lhXq1lwRNYRGGzxlex:D9BVi4OwnhYT6VX9F
MD5 SHA1 SHA512 SSDEEP

AutoUpdater.exe

IMPHASH da9a5657bf283ee6a9ff17df5aa8e2b1
SHA256 553d24e839606b23bbf2e37ffc52c6a5bba66cde3a92340c7217751746ad1e57
MD5 2c6eeb201a4e484d59ca2e0593727ff6
SHA1 9339e64df2d1bdc32480647a942196cc97724303
SHA512 9e82622363b3b68e35e764ae9e537e00155b05d01186877045f83b8347623637c848e50eba429c756aba26cdc4995a24b4cf69b56fbfcb072117e13230634904
SSDEEP 3072:jLjSIX99Q92/HASa/nh1N91ZRVGRemrE2tGt/Mhq/2Z:j6IQ1XY/E/x2Z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegEnumKeyExA RegOpenKeyExA RegQueryValueExA

kernel32

CloseHandle CopyFileA CreateMutexA CreateProcessA ExitProcess FindResourceExA FormatMessageA GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetEnvironmentVariableA GetExitCodeProcess GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetStartupInfoA GlobalMemoryStatus LoadResource LocalFree LockResource SetEnvironmentVariableA SetLastError SetUnhandledExceptionFilter WaitForSingleObject

msvcrt

__getmainargs __p__environ __p__fmode __set_app_type _cexit _chdir _close _findclose _findfirst _findnext _iob _itoa _mkdir _onexit _open _read _setmode _stat _unlink atexit atoi fclose fopen fprintf fwrite memset printf signal strcat strchr strcmp strcpy strlen strncat strncpy strpbrk strrchr strstr strtok

shell32

ShellExecuteA

user32

CreateWindowExA DispatchMessageA EnumWindows FindWindowExA GetMessageA GetSystemMetrics GetWindowLongA GetWindowRect GetWindowTextA GetWindowThreadProcessId KillTimer LoadImageA MessageBoxA PostQuitMessage SendMessageA SetForegroundWindow SetTimer SetWindowPos ShowWindow TranslateMessage UpdateWindow

Name

.text

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

AutoUpdater.jar

SHA256 b5cc67c900ca454019d5dad1e7528785077ba8588e9f2db33850c391d524f369
MD5 cce5ba674d5e206366fb4d00af0213ea
SHA1 556ba0d4ae87796e70861f4f425ef73f5df2e766
SHA512 499c63221226a30122ee44fd4c12c74cb1cdb9108823d008c9d737a4bb9ead7aecdffe8f621b9cd4e8dc3d7b3a1fa30df66b436fec73524f6020fbb24fa835c0
SSDEEP 3072:s99Q92/HASa/nh1N91ZRVGRemrE2tGt/Mhq/2Z:v1XY/E/x2Z
MD5 SHA1 SHA512 SSDEEP

Importer AUKCJE FM.exe

IMPHASH da9a5657bf283ee6a9ff17df5aa8e2b1
SHA256 f793cdc608f07f8b27edc05c3363407d730a2f00d5b068e8c83ec96d4d734eac
MD5 67d9f6210de97ba16edb8c75025e8cdd
SHA1 5c337b8ce7b7ac71251eca60a647d2d163be1009
SHA512 affb9ebc2855756af4a62052b37891a9aab88ec3df9e1dc8843d9cfa91afef83ac20a641afa528ba81ab4e1a4d676746c191da413a1cd5591bcf2711112becba
SSDEEP 24576:ln6E1qgA+vILe+MrNTAguTF76Lk4OSAPrcfj4nAtB:l67+vqe+SNToTF76LkJDnAH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegEnumKeyExA RegOpenKeyExA RegQueryValueExA

kernel32

CloseHandle CopyFileA CreateMutexA CreateProcessA ExitProcess FindResourceExA FormatMessageA GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetEnvironmentVariableA GetExitCodeProcess GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetStartupInfoA GlobalMemoryStatus LoadResource LocalFree LockResource SetEnvironmentVariableA SetLastError SetUnhandledExceptionFilter WaitForSingleObject

msvcrt

__getmainargs __p__environ __p__fmode __set_app_type _cexit _chdir _close _findclose _findfirst _findnext _iob _itoa _mkdir _onexit _open _read _setmode _stat _unlink atexit atoi fclose fopen fprintf fwrite memset printf signal strcat strchr strcmp strcpy strlen strncat strncpy strpbrk strrchr strstr strtok

shell32

ShellExecuteA

user32

CreateWindowExA DispatchMessageA EnumWindows FindWindowExA GetMessageA GetSystemMetrics GetWindowLongA GetWindowRect GetWindowTextA GetWindowThreadProcessId KillTimer LoadImageA MessageBoxA PostQuitMessage SendMessageA SetForegroundWindow SetTimer SetWindowPos ShowWindow TranslateMessage UpdateWindow

Name

.text

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

ImporterAukcjeFM.jar

SHA256 2eb8ed6625da6b6693e7e4e04d13c4cfa14c20318869c02872444df9fefbfc29
MD5 421198d77de86734f31561d85a0668a3
SHA1 c295c2f97af3852f5bc42b2739676c3b5ba32df8
SHA512 33027cd9a0b3f16492d8394967ef4ba7be2e4f6319a7fb27db01e490441b5ef555ffd0967303f57bc8c9c1aaf0b3b769f564e3c55afe1821b44c6e3f7a32cb1a
SSDEEP 24576:Y6E1qgA+vILe+MrNTAguTF76Lk4OSAPrcfj4nAtB:x7+vqe+SNToTF76LkJDnAH
MD5 SHA1 SHA512 SSDEEP

kategorie.csv

SHA256 69d346a03bc01181f386dc2a60748aebf383b90cc3b28df359db1d187f22d347
MD5 a626f5ceec01bd773d10cc1d119b80ac
SHA1 3a128aa727fa7671360022b5edca1305ddb72f81
SHA512 ac7a23f3bc253be3965ae3ae37fcfe945424fac90bfce83ba6364ea793e95eda88fd40a700d5b616cc5e674bab501865a8b51706a4c98374e040fa66dec6739e
SSDEEP 24576:TJ9UgrKs+Zq6OBato7c2Gf1R1WjgfKXhfE:fUgrK4VTxcL2gfKXhfE
MD5 SHA1 SHA512 SSDEEP

lib/FastInfoset.jar

SHA256 fc349abfc656f67a45fbfec914e41a4f0164e253439cc296eaad94acc7619fc4
MD5 c763f77465078a3a654ac3d99d85ac91
SHA1 0d411a01a73260c0cfd386d158cd2f307c574e9a
SHA512 86e19034ddc1720e452bd406b8c6167457e0cd47417648f989acd4df72797c73bd4adb9cf439e1673c3e64e8fec2a71fca00b54b064f7e7618487e57942d7ce4
SSDEEP 6144:tUbQnJ4VdmGrU7LO8aLuMFeR19/5GcwtY5WJXFr3Pw7rbvJmxdiH3RGLneLEEcr5:8QncfraLO8qlSr/WY5Wa+
MD5 SHA1 SHA512 SSDEEP

lib/appframework-1.0.3.jar

SHA256 50044403f23114ab40e20a2f5a2f2077d67e2b66c3ccb7d5c409fa9e323147e8
MD5 286f73433ec42c959ea19c2943efeff6
SHA1 8977f2578987e52949dc68cf691bff03c21aa86a
SHA512 9e0b4b9bdbc597f5655c021ee0b54c4623491ef47b426563908e8c410d6ee583c0bad3dd4f41f153338585f1f69e5e3b05a1d46d51afd11c341fb0ae819dae25
SSDEEP 3072:vfWdsrsY5FMTV+6+oonDYH9UASlW0AokfGEITzah4rJF4RUXxp4dBlAXKcWne3tV:vModko5HkyP+l2
MD5 SHA1 SHA512 SSDEEP

lib/commons-codec-1.3.jar

SHA256 1bafd2ece2e88db4cdf835a7f8f0de65fab5b1147977a5dcc59b7c1b8c6f5080
MD5 8e149c1053741c03736a52df83974dcc
SHA1 fd32786786e2adb664d5ecc965da47629dca14ba
SHA512 acea0a510bb701c7bae3cb41b5c61a93e72b99c8441e5081269856df906fcc6de1977984f229eb78d0dc1601492a36d9992611c1ff5b8ed3f7b96294d67ecc29
SSDEEP 768:mkBjHiXs5sG+3Rg74aPkMM5l3F1GpKNbqdt3U5YilcQWlGgKtjyJT2w9lc3n7OAN:mA4s+G+3Rgk+qGpKN+3Ehlcjqsc37dfF
MD5 SHA1 SHA512 SSDEEP

lib/commons-httpclient-3.1.jar

SHA256 dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443
MD5 8ad8c9229ef2d59ab9f59f7050e846a5
SHA1 964cd74171f427720480efdec40a7c7f6e58426a
SHA512 85e79d4fdb266861910ef95bcd6e82a7f091c9bfbc63dbe2112383ea4d53a5b7a378b54e7c472fbdfde923f30c72d9cad626f8fabb0b9c70d1dfb095add73359
SSDEEP 6144:p+XL+YxIBmM8zRgi4S5XKzNFp4z7tTSB1NmV:pyisiKv7tE1MV
MD5 SHA1 SHA512 SSDEEP

lib/commons-logging-1.1.1.jar

SHA256 47d0c01a41e2883fde74dd162e168ca65c7123de17de51973a4f821bb68466ac
MD5 e2c390fe739b2550a218262b28f290ce
SHA1 2d859791fbf7d880591864bd4004d8442a8a3b81
SHA512 7550a6414662145adb5da6290ab630298bd3bf9f219a45547957d8ec385ec5bbb2962643308653268dae8735a9375220badc7c9d6ec6407daefb14aa6742c766
SSDEEP 768:YuirguuXXNlrTMpQHBSSfqKeRzrAWuWjMw84O84uCSAJh70q9ENKHZ8LwyEOu1wR:IgXNWrSiKIY9TG2V0q9EsH+wyEpaIdvY
MD5 SHA1 SHA512 SSDEEP

lib/httpcore-4.0.jar

SHA256 1fa15382508fb9bd1c187467fa40de14540f48ce8662f19723c1cb2457542250
MD5 69ab95da4ceb8eb5f8fe6133de50cb1d
SHA1 270fb05fc2ea278dfb1bd2f15fff4d9c662c6f3b
SHA512 96cfd229c986710ce49f1569b8317d99d5df8eb2a8b1a4daf1ccab9cffc632310d7695cfe4e079467ead752e759ce37937c2578404fbad7ce56e3151853c4122
SSDEEP 3072:FRDPgSl0XOAVE8jkDSS0Do3vLvWLE+7EoA5MwDahSBMlblTVJ/DtduT7I9:7PgbH9yK8z/+gdM81BMllQT7a
MD5 SHA1 SHA512 SSDEEP

lib/jaxrpc-api.jar

SHA256 6e6e91032077cd04c5629ef84f19d90fc95b01569d88a8ee57e44758ea3ff28c
MD5 4365bf986b0ea1acd00e3270a0a5ddd8
SHA1 56d2d66d65745f6d6bc769720043262eea4310c6
SHA512 0dd9bcdecf079a5474796890404f17ad5c71d6c13305defb8e94cd0eb4ddba42375193fad6dfddd21af497849d03b71932974b4b5f031c334a43aae8238b4122
SSDEEP 768:JTlEJeaoHm/LyXG57Yh3yR1fE2gIUUw0x7MNCzg:JTGJ4G/+W57YhQIqw0x7sEg
MD5 SHA1 SHA512 SSDEEP

lib/jaxrpc-impl.jar

SHA256 2334c85292d20ee0cc4bf80f6db91304b8ec9eb6fbf0860d1116b3b71562ab8f
MD5 35aff056aeb6ca559e38958cf0ce8a06
SHA1 58b01229bb8986774e63c36dc1f2b2d67f8e4aff
SHA512 76c7f16d7c28e5650f82dd83ebe17a20611080ddc089bb56b0557b100d5277d174882646d166c2001e30ed6f17110b6e96d116bee9fc83ae4b42d7b57eb7227c
SSDEEP 49152:n4pvaex8umvMhopgWEe4pDQVuYeXlsok7JRCFfVhjsP:4paagMhopDwDUGlsJ3AfboP
MD5 SHA1 SHA512 SSDEEP

lib/jaxrpc-spi.jar

SHA256 7443c5fdfb9ddff7eb2bb908bd068e3c92c09c5bca3caf551c177326f5899dc0
MD5 ec112c092ada6198505381e1306fddf5
SHA1 4c2ddf40889be8863c18e60ae4f3378b948b2772
SHA512 5a6ae29f3f24e7505b20e75b8af75936d3f0b84c7c4c080dd24507c9408d27e20cab3b6ea817ad7e0c3b65c315b71d38c1803ec378cb1a6196d60d0750a26b0a
SSDEEP 192:aSlq1GipaqOiMPZQWJwqdIsDoUDR1CEjSE4zxkw0tnGtoKgaM6U7T31UunvDr8gA:b6pa77C+oUjSE0yBD1UMvDTuNcftm
MD5 SHA1 SHA512 SSDEEP

lib/mail.jar

SHA256 17a71eb992e773588370e425b7528f4c660fbebcb69733f4fda8b95d74d440bb
MD5 7100582481c9b34af78e1da84cf43970
SHA1 99037a478e0cbd5faf216825a0a1c9f4c2f29820
SHA512 352dcce25629c5e519b8b819545258a8050546ad0f9fc27f8b747f7fefea0e6ee421aaf468646f2e2a5a14372b09d792d1039e80f2ac3065e3a1a0ac6907f3b4
SSDEEP 6144:rf37WsKRtmZe5AkUhu5cK0lvAqi0iY6k5:rfqEZBkUhvKwfD7L
MD5 SHA1 SHA512 SSDEEP

lib/saaj-impl-1.3.3.jar

SHA256 a43b05ba571c674b105366c92f8bcde767beb4151f19bdd836d454ae80986c0e
MD5 2da6039d38084376f4afa0275a72ef0b
SHA1 4e0c93e61ec6acf0a3ac96e692a58d184fba1456
SHA512 9cbc15cd497cf8304c180ae2008da859f14ad4abf4f76c54dc71746904223c8ffe1dd03a92ee596c86cb85e674a3c1bba5375e09a504a7b4eac88d4f9c5a027e
SSDEEP 6144:Ux5R6dAZY7xDLe4WBCcjyNLEWPBc1YapIu:UB6dSIDCCNPaiwv
MD5 SHA1 SHA512 SSDEEP

lib/swing-layout-1.0.4.jar

SHA256 143e5551c32934263260412c1d5f4e327fe186b8a5512c0db16ef2e3ed022cad
MD5 983f446152a79d2985a31ae6ad9fd97a
SHA1 6887e101a8c508c851ad137f8cbe09fd1565ac6e
SHA512 d37279fe55152e5bb9f4340e9044cd77884d3ac28a0eedf816e61a24883012d2c3df60262a28b7c346d52f848fe97985cc886d91d0788fd10d022fb3844cb59d
SSDEEP 3072:Hv4HzAOEKAAriHwKJ17bchceqv98Cg1twADgJTlrN/ZVXCvxo:P4T4cbuGU9r
MD5 SHA1 SHA512 SSDEEP

lib/swing-worker-1.1.jar

SHA256 e46c71858674db7c0a258e6dfbe6b072b37c842a2e8ddf2480f0eb8f92b6988c
MD5 724fc8f630e2b0b44672caf51d3be455
SHA1 fee02e9e74b07f305472ea7b0a4d02912aaf5ffb
SHA512 38c445f81360c23951438c8a8a66c200e6192fd38f7204af5333832ef351c7e259cfb222f3de3b87d2323d6cdcd3e43f119bde461f70615411e09940dd9c66a4
SSDEEP 192:D9Y13xIR05vOCwvzVkjuZJZ9c0uQSW7In86ixNstsficiKc6MrU8/:D98YOOCgBkaLm86i4sqcirfx/
MD5 SHA1 SHA512 SSDEEP

uninst.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 412cedb5091981f45bf214b277dab41665cc313f1089fbbb384745bfbf0a1bd5
MD5 5e2e80053ff65d4a7a599d5d376fe945
SHA1 323167a47aa22b069088f336ec437738cd27c8f7
SHA512 6ed0ca5bbebe8a5409ebb87a7acf934e839f44026f6ed6ba8a632e2738cefa7336b803c8e55f9cb1e6f85c1fb5a6a004fd45af6ead201f619b72c99b617961ed
SSDEEP 1536:j+dZEszWriITJGrvopX1VF7CXjl7yxgsYLeAyNZHc:jBszWOITsEL50jl7yxvEeA4c
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13333

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

version.ver

SHA256 206620a657f1ccc8af72b866fdcef20e641c48f39ce27f338ce8313949c63e53
MD5 acb766c6067f046105f8b1263b9e5172
SHA1 94dcef061335413abfdb9c1ca0b391b7bf178b90
SHA512 5c9b14ed8bca2cdaf7affc12d077de33a519e58ad2beedfaab2f4cc9b35c8952a48167d8719e5f4005c444d6ce729e743364266c5de63af00305b194ae46eb29
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer