27fb410d5aa6711fdfb83052c703203f_JaffaCakes118

resource	yara_rule
static1/unpack001/$PLUGINSDIR/SkinH.dll	acprotect

resource	yara_rule
static1/unpack001/$PLUGINSDIR/SkinH.dll	upx

resource
27fb410d5aa6711fdfb83052c703203f_JaffaCakes118
unpack001/$PLUGINSDIR/AdvSplash.dll
unpack001/$PLUGINSDIR/ButtonLinker.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/SkinH.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/Ϸ.exe
unpack003/$PLUGINSDIR/BrandingURL.dll
unpack003/$PLUGINSDIR/Inetc.dll
unpack003/$PLUGINSDIR/InstallOptions.dll
unpack001/Shell/NormalColor/Shellstyle.dll
unpack001/uninst.exe
unpack004/$PLUGINSDIR/System.dll
unpack001/ε.msstyles

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$PLUGINSDIR/Ϸ.exe	nsis_installer_1
static1/unpack001/$PLUGINSDIR/Ϸ.exe	nsis_installer_2
static1/unpack001/uninst.exe	nsis_installer_1
static1/unpack001/uninst.exe	nsis_installer_2

IMPHASH 099c0646ea7282d232219f8807883be0
SHA256 2b49ca21dd645edd3d08709a68f205cc59bcc2a48b8b3ba49815fdceefbb1c4e
MD5 27fb410d5aa6711fdfb83052c703203f
SHA1 bd3a79886d13837d1643227356946befcd488eb9
SHA512 b9681f68136ad3b7b95663b810b062cf198dedc5bd50d679dbc5883ff5feab9561d630e5b43e2da0401dad233088d8a7a5cdd024f1f57ffbe27ace642741a692
SSDEEP 24576:JS91TM/9KwQXJZcTufYgwDUuLKzY9IfKhV98ROv1enKEUdx3WO3TOHM3ISjaa:JCCVRQX/cSFwDEY9jhV8UELUdxWcTF7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12860

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetFileTime GetTempPathA GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetWindowsDirectoryA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/17561.vbs

SHA256 609cf60273fadbe4c80f8f49584af34fd9406ce266b827dde9ce968fad5b3f72
MD5 2ac26956932b367d8f52cfc9dab33f81
SHA1 c156cc9273e8309dcc7ee7b32cf61d5e080fef67
SHA512 e0f26874433e78d3c85186bc8808860dcd751d4bcdc674d9339fd1b4ced792c24d4618e68c7fa22b69200e7079fab18d93f74534fd075f2fbee2662375842f10
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/AdvSplash.dll

IMPHASH 741b6bafe355b63a372d737b30543a95
SHA256 eb1ca2b3a6e564c32677d0cdc388e26b74ef686e071d7dbca44d0bfa10488feb
MD5 13cc92f90a299f5b2b2f795d0d2e47dc
SHA1 aa69ead8520876d232c6ed96021a4825e79f542f
SHA512 ff4e6e6e7104568fc85ef3a3f0494a5c7822a4ceaf65c584ad534f08f9a472a8d86f0a62f1f86343c61e2540b2254714b7ea43e4b312ff13d8271ff069386fa3
SSDEEP 96:6hNSXIcmYjkvTS6MnBNZ1BMjDfhkkEkkXstWpPwoS:JXIpzTSd1BSk/kJtWpP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4448

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ButtonLinker.dll

IMPHASH 8466b6530f29387ac28e94fe1e74b98f
SHA256 27abd2a4fb1bf66add60221b52d061bbe24d2d21e13600725ff7a5c6c777b504
MD5 dd85ac7d85c92dd0e3cc17dfd4890f54
SHA1 a128fb7a05965c1a9913c6f5e419e6c4c0a7d2fa
SHA512 e4ff8216c65110a9d156f37c2062acb53a72daa8af12dfc24278920d9e1a4083a81b1446759df75405b2da34c7bfb1afc33184feedd0aee4ed73f79fcbb1a8a1
SSDEEP 96:q0GBDU3ADeEZlBLx6sWHCKGKVR3YXqNNtFa4PaaU4x:X53jEd2n3Y6NNtFBaa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5196

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/SkinH.dll

SHA256 6504e515cbcf89cb98fd9f1a310125bfdf93e1f6a6bf0c64c0229e5670cac9b1
MD5 a00c474dc4ced90b8f5a692108c45dce
SHA1 e02722d30a6218523e9ddef287817788a4a9b9fc
SHA512 e81b001379f94fabb71f1d6a019b81202e00da7338048b77d1728b40427689a32801419377d3e86c51c5e418cc3ccc328ee00adc69eaa575267bcaac8f477abd
SSDEEP 1536:uVNx6WNnPZ369Z3TCy5KcGhVek8Hvv144SNT7qgG7kQSeQmnouy8U:uVNx6WNnPZK9RTkieJw7uWoutU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

235392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Splash_logo.bmp

SHA256 3e7e5789e167db6b0083dd55eeef5d07788df39ef445b5e3c57dfe1dbe2b0609
MD5 3dcf4007b5c6338388e305ee270c6c4d
SHA1 36157c36397604f4b62e7a9c9b7a0d3b68c90dee
SHA512 d44a6bd649243353ed17eba28e4d95a4f386c99657afbb1d89d337b1abf9fc3d4b615db4ff4b47e5a9a644bdf747fdd3ade32f135c6a3e09ed48fd1c1ba9866c
SSDEEP 3072:cslqYudTdc91GIPdRy3NwNbVQGi5XBVfXX97e9DRk:h/udTaUIVRP6GiB5e9DRk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-header.bmp

SHA256 28902fe636c0bc69a7fb0792b4e6a3563fb90e6aafd4de70b684d96d629042bf
MD5 55feb690bcede1e2c9e287b0db4d591b
SHA1 ac995ae094bd956b9b9dd4e966e289b6eea71fda
SHA512 b48bd71df3f94c386e4cfe7df5a2327e6283ca6ce10dd76e2a7ac29c89136ebae6b4bc50a95669456eb5ac263cef048775901d9223755aaa7bce02a608acd6ad
SSDEEP 384:05ypB1KKjycASiEkpUvtLxnKSCnJ77sTXGROTMsHOq6PC5tEQaq:CIB1zjyF7EilnJfmy9qJtEQh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 7e9c010ce7de00b6fd5921b3931872fb18ef09d2ecd844ef3567b8d01a3996c5
MD5 1f9ccff472a33e222431753f9f1c5373
SHA1 c115f55959ce367a8b3fc62a78e259b617af131b
SHA512 83e00969f2adb162bef1ffbd55e7062ad043490fb4295f17e9d539146985d3fc4a3794f84d05b7a0ec0aeb56df7f7f49f777edeea24b3d64f00dac93504bcbd8
SSDEEP 3072:SXZnTRemALZpg30Ix/kw/cEx7S1sJLQ408PFYsD/Nsb8F:2xTMmGgEIx/kw/c87S1AL77PFYsD88F
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/pcpc.vbs

SHA256 a3d17e06945cd044a9b2a13dab8f4ca7d2f309bb564fbfcea5c1e570f82aff89
MD5 03e3b03acfb4900c61ec54c07e9a6834
SHA1 f6d1cb731fb3bc69ad2fad90874ab73895915aee
SHA512 19d59a1df2d6222dd685b2c5912d09b280fdcf134494f77d61923b233be5c5a7892262a514a4e38955ba2f8af1715be1340f7544e56668b0681014409ee64239
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/run.vbs

SHA256 ab6539d229042f0e62871b4d5c8fa4900dd74f0d6b58ebf460649f872a5a24c1
MD5 ef270d12f353b94df409fdf9e1dc7868
SHA1 46531b1f2bae7a7cc6dccad524943c6dcecf9219
SHA512 04ff9b1476749e4d711b9609ee84db93f1802159a778b2710bce089d2b11f0b377044f6cbfd556091d788d06674034d4b55544ff5047ff2d2c02a4ae3db4f8d7
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/skinh.she

SHA256 ac6e2632c6fb33c49f8a42f90a5103a6a4a31c434138149d735c406d92f5d49c
MD5 4958d4665072d3e2738f1f46fe4171e3
SHA1 5db8e24253a79a78c9d41c819a329fb7f4af57bc
SHA512 d2095fd94285be764f090c5709a68057d3bab1569c7724b041fc0a6fdf37ca1968dfbbd4a4fa5c9a160c4435dfcd17791c2bb02b6f47cd6a57a5c9abd001437a
SSDEEP 384:zUh+RzalKeOx7MniaO9mspI1l7PrKxWunW2M6ZB15/QDILl4V:+szalKdGiaO0smPjKxWhN6Zr9dS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/Ϸ.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 070ff0d88fd01d7ddb9e2163c93120d75645c0f43ffd4e661d2cab9cd1ecd348
MD5 339ea025e089399386696d1c3941e250
SHA1 606b345cdc0b9587b0603cca9e62737ae0a3eb9c
SHA512 11e2a1fbbcfab6a58351865bb0fb50e6e8891d428522450e39a4bc03e701bc1abf65eddfa1ea3e044467279e2b41dc7da03503308177bed682c8c5d3fc882605
SSDEEP 1536:Nf4exGDkeZ4mOoSgJEAJJh4Romu/BLohf6tk6NO1uWFO:F4eYZ4+1JXJJh45SBOZFO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/BrandingURL.dll

IMPHASH 135de77644e2add2fd9dd8176740e7e0
SHA256 bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
MD5 71c46b663baa92ad941388d082af97e7
SHA1 5a9fcce065366a526d75cc5ded9aade7cadd6421
SHA512 5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4945

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Inetc.dll

IMPHASH 3f1149a3053980fe6b461521d2b55a2c
SHA256 6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6
MD5 50fdadda3e993688401f6f1108fabdb4
SHA1 04a9ae55d0fb726be49809582cea41d75bf22a9a
SHA512 e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8
SSDEEP 384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14255

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

_mbschr _adjust_fdiv malloc _initterm free _mbsrchr strtoul memset _mbsstr strtol

kernel32

CloseHandle CreateThread WaitForSingleObject TerminateThread GetModuleHandleA MulDiv lstrcpyA GlobalAlloc LoadLibraryA GetProcAddress lstrlenA WriteFile ReadFile lstrcmpA lstrcpynA GetLastError GlobalFree lstrcmpiA DeleteFileA SleepEx SetFilePointer GetTickCount lstrcatA GetFileSize CreateFileA

user32

MessageBoxA GetParent ShowWindow PostMessageA SetWindowTextA GetWindowTextA IsWindow GetDlgItem SetDlgItemTextA SendDlgItemMessageA SetWindowPos SystemParametersInfoA GetClientRect GetWindowRect SetTimer LoadIconA SetWindowLongA GetWindowLongA UpdateWindow DestroyWindow KillTimer RedrawWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA IsWindowVisible EnableWindow CreateDialogParamA FindWindowExA wsprintfA SendMessageA

wininet

HttpSendRequestA HttpSendRequestExA HttpQueryInfoA FtpCreateDirectoryA FtpOpenFileA InternetGetLastResponseInfoA InternetSetFilePointer InternetSetOptionA InternetQueryOptionA InternetCloseHandle InternetErrorDlg HttpOpenRequestA HttpAddRequestHeadersA HttpEndRequestA InternetConnectA InternetCrackUrlA InternetOpenA InternetReadFile InternetWriteFile

comctl32

ord17

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
MD5 0dc0cc7a6d9db685bf05a7e5f3ea4781
SHA1 5d8b6268eeec9d8d904bc9d988a4b588b392213f
SHA512 814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
SSDEEP 192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$SYSDIR/1155.ico

SHA256 6d7c4f3e5eee7ed1b3bc2f82af854983fe8ff99236e8ab66bfea45a2630e7feb
MD5 86dc230c815b833be0e286caee98cc0b
SHA1 cf6c5dc49036cf74f0e595643b4073b7f2671f9a
SHA512 4276456f9046a0f3f84522ade92e122d929547cfb62b3592c9c984f353394ef8a869536a0ecd24d62864508d1ef7b4af3766df9dd31cc7c606ac7784d49083c1
SSDEEP 1536:s3y04/3upE4UIQAxGDxnvIoZzYdCFVBJ2dR/dTwQhEgwkHGiYH6:1L/3upd1qnAEzYds7E7/dThEgsJa
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$SYSDIR/Inst.ico

SHA256 eaef553d695475a162d280d2eb6808fcacda7c1f29d5e21a1559d6a0256c0305
MD5 8778a1d5d86c606a13de03502f923651
SHA1 16bbed7aa83ac40bc5825114c5344a54138bda2c
SHA512 41b7e58399740f55d8db719e72034c79f71aa7325d324a1cc9962f367c3d74e034e3753537e8d8cd08d35f1b3e9ba711ff37c8dcd1152fa30fa812f2ae0debfc
SSDEEP 384:j4rRMSiWzGtRDMGt0p9sEJTg5LFxYTxbzgA+rDXt4hi2mfrlFv:jO0La9si855QxbUA+rzfrlx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$SYSDIR/douxie.ico

SHA256 647ddde323778c62bdcb126d0c717731d500fdeb2e8a0ca02013eb9f64eaad74
MD5 83db228d271d79606c0f4f8fadd7fd77
SHA1 f42f9c60275e65f0f36640771282a274c715c738
SHA512 a44ce2a63a98864e35034d0d99160c66cce2d62c13d32c9671111420622b628da55ab14d12be0c6985055222f00651a819feaca4914fb4db7e9aa41d6d1da353
SSDEEP 96:9DhvhTP80w/ze7+D7v4AHWhFapXrpiRPvMCPpYLQOlAbxiLU:ZPTNw/i787v4AHWYrpiHPYjExEU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$SYSDIR/.ico

SHA256 eaef553d695475a162d280d2eb6808fcacda7c1f29d5e21a1559d6a0256c0305
MD5 8778a1d5d86c606a13de03502f923651
SHA1 16bbed7aa83ac40bc5825114c5344a54138bda2c
SHA512 41b7e58399740f55d8db719e72034c79f71aa7325d324a1cc9962f367c3d74e034e3753537e8d8cd08d35f1b3e9ba711ff37c8dcd1152fa30fa812f2ae0debfc
SSDEEP 384:j4rRMSiWzGtRDMGt0p9sEJTg5LFxYTxbzgA+rDXt4hi2mfrlFv:jO0La9si855QxbUA+rzfrlx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$SYSDIR/Կ.ico

SHA256 6bc1763d1849e6c0cea15fb0988576c7389710c187d2019a607575149bfdadfe
MD5 7330c9c92854827754b154320c703442
SHA1 6a2015f22a5d8a52fd31cd4529324c726fe81de2
SHA512 d5dbf0a222cb95da0a6a651ad18f8220eb8e4d92f55abee8b5da7ac6c1613b20320922e3884558ec578e956720eca402bf1779cf73449cacb59e4fa9a8878fa0
SSDEEP 48:8DDOcoQC0qSqLCEb7WHi2vCZcIf5nSs7HkW0VdABQF82:8DDOTN0qSqLV7F2vSt4sREdN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/AppStarting.cur

SHA256 2312139f3934419d8e10d886a2da38d561b90a36f1f8f864a8ffe3b006b07869
MD5 01a338c43236d5e709a610787a9c778c
SHA1 477cee871a6cebb3e5fd96378780cb5254fa7577
SHA512 dd71bfa581167d1e2a47a5794a5de3ba48727f1db66dd06c1eaff56a47fcbeb231f7d532fcd59416f0d43f1b1249440957328ee0a0e41ca893b830f8e9d86bd7
SSDEEP 96:8rkyyrHyy3iuyN13uW9Hr51demFCvgEQDfA9kZ3r:8Iyyzyy3iuyDewF1kmFCvgEQDfA9cr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/Arrow.cur

SHA256 a53035248b9b322df22829678cd32482bc3a59f1a3b0de4984936ecc997790e6
MD5 dfda9da8f041372d257ce530cbc3b066
SHA1 8350471f8f8f222f07494f791a329df4bc53c300
SHA512 e0d4832bfc040789319bc6c8667447ef17c743fb9ee3253f1b6643bebcbb67aa6fc2ae6d25fc191b59aba8482ea0e44842d9267d21818203f6f7a4eb764e3b56
SSDEEP 24:DnWt1WtWtfo/w+M582I0LB9CRBtZMoyBMyalFt:G1yyke82Ic9CRBteoyBM9Ft
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/Crosshair.cur

SHA256 750e33859a06f7f0846be68ba6d56d81274d57201378342dcfc3bdda5cff20c7
MD5 7d86c4f5941b1e9cdc901526d308951e
SHA1 592e6977fbc12b8f2ac886a8adc438479549efc9
SHA512 0ca78cb3fee4554ec9451f3eeaf43c08de1fc353520b296c02d0ee76f533ff3647d7463594533d46f3e5f3704216cd9b03737b1065f7c957b354c287b2f1c559
SSDEEP 24:NsY+GSBetOfqvN/utUdTtjx3E5U/OQnSkwHa2ElUwkr+/utlKUh5Ec:N4GSo8fm/umdTtjx3m39Ulky/uiUh6c
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/Hand.cur

SHA256 75224100332fc1c81bb870bfac6c1f3ce7c142cdf6d808e150f88a0e04b3d6a5
MD5 7983d36ae482381d99b9d0ce9219ae8b
SHA1 299b0446451c7570e2910ee7939f3196ad794b87
SHA512 1e642221d6fe97626eb9e2e5581baa4a7bb4d16e3cd51500761e8fd6b6f2e769c1c9296698171dd43b8760f43ff714672fe61c6222478db9b873a6ec73b7e551
SSDEEP 24:DcWt6LWtWtP8/p/EYrUb1Jtl3U6to6aNZ+XJFg5ZMXPKTRlc4t:R6LyySEFjdNK6wZ+ZFg5eiTDc4t
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/Help.cur

SHA256 7fae39cb3d8a3a3be56e2a4d9689154758e59140cee0340c896e3a117272df2b
MD5 eb5e15eb086152ebc683c86e2e3d9cd2
SHA1 6d470413c29095b1661340f2d8418866397c1a87
SHA512 2b8eabbac59ab05471f7fa32416055ff227c6b647e3357f79da21caad22e770887bd1500c25dcb36cd590e4ef171adac795b589958d108e3141b1e7d6a104d97
SSDEEP 96:GzyyyyYQ9kz99gzUyGtSBAF7/N08Qf44Wq:Gzyyyy9u9gYyGtSBAF7/NOf44L
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/IBeam.cur

SHA256 c288e4e4fc79fd051e90e3b052932a183f2ec9935450680f4c15e405e9ce8941
MD5 1cbf83d76a855ef655929f1d60ad680a
SHA1 c323b0207c20cfbb142769a0c955cbb2bd7f9744
SHA512 bad00a28ea6b4997dbf65f2de4768948d5329cc6e6bb7f204693c232bba68e1c72fcaa0077cc20f21033cb68239d548ead75549be05906117a39f758651c2020
SSDEEP 48:PS7+/u0/u7/uvo/uh/uR/uR/ub/uB/uA/u0/uAhuH:PSi///w/Mo/2/G/G/Q/W/r///Zh0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/NWPen.cur

SHA256 1b1f034e0435dd334b223c684b8cf89920fdba6e201e12a5f3d8d8b28b35f60c
MD5 346a33c0be5c2c79702b956ebb27790f
SHA1 ae4da5fd5674b3f0311bd21b3b46c316a5ef7fa5
SHA512 a51529ebdfec6c393b05d904c803f62057b972407223e7887a57e9ddd192fa329e805387b5d269ad42bf4a1c70425e23674708369b5bccf9242aba6588fd2c61
SSDEEP 24:D3E7f7kAsWR+au+dCOZa8mjpjKzVaBZlM2VkB9QYM8lC5V8:yj7+D+dCOk8apmzVAZOikB9QYM8U8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/No.cur

SHA256 36625d1508de25fdb0ccc320fbb74db44e2b0a61df6d7e00dd9cb9bcf9e02d00
MD5 fd79880e1c65161a5e774c83effce50d
SHA1 2d1e7b2007a2b946fc39697d50b149ca0809faad
SHA512 f64382a2843e20dee792d5430ea62c18021d587ea7fb2e548a33082e9424c7adf974d0a02bd263a5464e0e0f0f0035a3f6b921111365a7f51a1e81408aca033c
SSDEEP 24:DOyt4Q/afvH+6WtSmGmmyMbmcDJ/o6RKu0op/utXf30Zd/SrA+4J+66yXLEH:KytQuSnmoJ/o6RT02/uxf1EfJ+6fXLEH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/SizeAll.cur

SHA256 de50767e1364dd8ec73d4694ea6eb60661880ce82924d7f3ab67749b5a51972d
MD5 c95bd31dcf0d0154e8e3f7d337b65cb1
SHA1 207d417fd37dd78909df278f7eab8c524b199159
SHA512 c7032377bce5694e013e815a4e8f2f6c215c6d7fe900942f929837ae62c68aa69ed6d33d32c2e4f96cbd1d6e44f33d652dfe26345617bd852d2a99eb59b5d5c1
SSDEEP 96:Fm/yOjcD0OPA/M/PH/QJ/48xH3DWyyyy4kE3lrrrn:Fm/y6cD0OPA/M/v/M/ZxH3DWyyyy4kER
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/SizeNESW.cur

SHA256 bdc0c630d81f2117557435ba16230549d2704de67660bd5b86691d958364e1d6
MD5 9d0873289642adc7423c86f13ebe1acd
SHA1 6a1b3e3e30a813e59d707eb084a7ceb7c54350e2
SHA512 92e2237eff33a67170dff1ada07d0125a35da87c9a3dd76ce354da43e1191e994c6dcc3ef3766034f52b8c7918fe9a41d7ed33d7adac476223efe819bf9bdbe8
SSDEEP 48:SPyyy6OYZTg29vNz3uKA/ucV/ui5Q/uvynU:oyyy6OYZTgwNz3LA/fV/t5Q/WgU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/SizeNS.cur

SHA256 564d153603f4af017dcb25b2be4b093e1d388de9401797a49423bd17d29805ef
MD5 3d03057985d1df4171d85fed57041915
SHA1 48c98bdaba1f68a1161ca2ce4f6c7e5f002e5fc0
SHA512 1bce85887535b601ff3eec08ef5a1e681706a509924e4a92c62cebef3cb464f8fc6bb1da36aa0feb4b3e13eebc36e6bd7c3dfdc9edd9301dd5e05f6c601fc624
SSDEEP 48:wtk/7DY/SCqRh9UQ8yyyyyyyeFqPJoSu+5WsXA:Qk/PY/SCMXyyyyyyRBo1+wsw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/SizeNWSE.cur

SHA256 8298420ac415cca475572e70eaa34f76992a400ad2abcd4590e4eab73c06ea22
MD5 fb3ca6debb1e39421bd43b47894c5aa1
SHA1 07709c965191ed7b9e582cf649cae2344870a71a
SHA512 771c67c1af26774b28069c68e634dc5882ad4a05d43ebf0c969e2da8e8c7c1d2237bd10b36ea914fbc3852339a4d506a72d6af9a68a2b16f1ecb70d998f33513
SSDEEP 48:CPyyyrN/uaM0/uK/uroju4W8C+/A7+/3/796yHo:4yyyZ/n/l/tg8C+/A7+/3/79I
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/SizeWE.cur

SHA256 7f4965731b869afac6d98e5060686f4903988d27cb70728ada0c875a4077dc82
MD5 10482d0ba66702fb001f0b2b2114124a
SHA1 29661fec9bc04c9bd42e5c08d60219c2699c2311
SHA512 5fad9df9f706302f52ae463887f0f9e28b647ea76de9ba73992ebbc62d7af8149470c654bff6137611a556e5f6edaa2f1489d1ea13d54e57338bef43ef5eed72
SSDEEP 48:HdGmuHg/2a/uUt/tf/uf/uBoG/uEo4/uCuLuuJ4MwHHTYMT:9Gmeg/1/9/tf/0/YL/44/yCI5wnTZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/UpArrow.cur

SHA256 52de71091e7a21949fab52b0719c382d82ef66c4bc9abeaa8dcbb703319e787c
MD5 7073e8cd6755ae2ce22ff2ad625dd007
SHA1 56c52fad6114cfe61bd12e9653d2b0e075995e33
SHA512 2e419876139e7f8a8ce92ca40709f54e2636ae826187cf88fbc840a674eaf3a70e47a6040394c4822b57d08175afa733bfdb33af39ae3c3c548c6066749a9f02
SSDEEP 48:ZVvuIyy//uU/u9r/uG/uAE/uu/uOL/u7oV/u4/ubu/uUuz62P:rryy//v/0r/R/pE/p//L/V/z/9/XY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Cursors/ε/Wait.cur

SHA256 f0f4fe6003bf6a92a53040169f1383eec4a66e9136cec80f83a5b1c2ead28e68
MD5 4d82aeb2137605ce1e530c9189a5cc88
SHA1 28c5f56787d3524cddb8cef1b0ceb611c983b64a
SHA512 b25b5dcdab8500f887517ff0f58185e2a84ace4da27c1bf40013f84d8c0e1ae5686a5099be6ad8e55f6c5b4accd72cdeb289eb83ab970f526343a340e192d272
SSDEEP 24:DeKTtWtWtWtWt30Q/OXvtgoSVTwPgCkMmWAuAGmEcaa3/J0xFKNBkCS1xBk:aKTtyyyy3iablC9+uAdEcN3/wKjKxBk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Shell/NormalColor/Shellstyle.dll

SHA256 474dfd4f9eefb07ad3f4d3faf061f677f6127ce41a7ad8a4648ade0b1fdad641
MD5 cced53d9c7ae36dc10f82a5b73f65b53
SHA1 06e6918c94c5ee206a65f81381e9ed967e0d4b60
SHA512 4f42924a6df2c8174da51b12c3c3d2f1b2cba3bd90d211ff3c268f939e5eb49f175a4f6050535a53db24e136d18dd6d1d1e30d81342a688637bc50679002b215
SSDEEP 3072:YKc9J5aN67L0UMSQSQpXEeB8ZucsOjGGVWH10GC1HW5ZHpGh:oJ5aN67L0UMSlvUcseQ5ZHA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Thumbs.db

SHA256 5b5a8ebedaac04ac6c06ec1c551d78031790ed9802563bd5bfdb3921efa24c36
MD5 71fc7c1f0c06561cfef9646918baa69e
SHA1 f1086461dd4322ed9a13c6a6bc43fddfaeb66e73
SHA512 0711798d7db4e1196d4dc61945ecae2c2b292f533b7dbc64f66d54985c6f6b78c8567c79fc32de06122f6d4fbad6cb0ccee8380e81965aa6fde4696e09d495fd
SSDEEP 384:h18lB7bKPHltGBjKYvlpLg9xUq94j4Qbo+mrg5FiNZPYq0:hyO9YOY3LgHUqij42o+mrIIPAh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/AppStarting.cur

SHA256 2312139f3934419d8e10d886a2da38d561b90a36f1f8f864a8ffe3b006b07869
MD5 01a338c43236d5e709a610787a9c778c
SHA1 477cee871a6cebb3e5fd96378780cb5254fa7577
SHA512 dd71bfa581167d1e2a47a5794a5de3ba48727f1db66dd06c1eaff56a47fcbeb231f7d532fcd59416f0d43f1b1249440957328ee0a0e41ca893b830f8e9d86bd7
SSDEEP 96:8rkyyrHyy3iuyN13uW9Hr51demFCvgEQDfA9kZ3r:8Iyyzyy3iuyDewF1kmFCvgEQDfA9cr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/Arrow.cur

SHA256 a53035248b9b322df22829678cd32482bc3a59f1a3b0de4984936ecc997790e6
MD5 dfda9da8f041372d257ce530cbc3b066
SHA1 8350471f8f8f222f07494f791a329df4bc53c300
SHA512 e0d4832bfc040789319bc6c8667447ef17c743fb9ee3253f1b6643bebcbb67aa6fc2ae6d25fc191b59aba8482ea0e44842d9267d21818203f6f7a4eb764e3b56
SSDEEP 24:DnWt1WtWtfo/w+M582I0LB9CRBtZMoyBMyalFt:G1yyke82Ic9CRBteoyBM9Ft
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/Crosshair.cur

SHA256 750e33859a06f7f0846be68ba6d56d81274d57201378342dcfc3bdda5cff20c7
MD5 7d86c4f5941b1e9cdc901526d308951e
SHA1 592e6977fbc12b8f2ac886a8adc438479549efc9
SHA512 0ca78cb3fee4554ec9451f3eeaf43c08de1fc353520b296c02d0ee76f533ff3647d7463594533d46f3e5f3704216cd9b03737b1065f7c957b354c287b2f1c559
SSDEEP 24:NsY+GSBetOfqvN/utUdTtjx3E5U/OQnSkwHa2ElUwkr+/utlKUh5Ec:N4GSo8fm/umdTtjx3m39Ulky/uiUh6c
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/Hand.cur

SHA256 75224100332fc1c81bb870bfac6c1f3ce7c142cdf6d808e150f88a0e04b3d6a5
MD5 7983d36ae482381d99b9d0ce9219ae8b
SHA1 299b0446451c7570e2910ee7939f3196ad794b87
SHA512 1e642221d6fe97626eb9e2e5581baa4a7bb4d16e3cd51500761e8fd6b6f2e769c1c9296698171dd43b8760f43ff714672fe61c6222478db9b873a6ec73b7e551
SSDEEP 24:DcWt6LWtWtP8/p/EYrUb1Jtl3U6to6aNZ+XJFg5ZMXPKTRlc4t:R6LyySEFjdNK6wZ+ZFg5eiTDc4t
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/Help.cur

SHA256 7fae39cb3d8a3a3be56e2a4d9689154758e59140cee0340c896e3a117272df2b
MD5 eb5e15eb086152ebc683c86e2e3d9cd2
SHA1 6d470413c29095b1661340f2d8418866397c1a87
SHA512 2b8eabbac59ab05471f7fa32416055ff227c6b647e3357f79da21caad22e770887bd1500c25dcb36cd590e4ef171adac795b589958d108e3141b1e7d6a104d97
SSDEEP 96:GzyyyyYQ9kz99gzUyGtSBAF7/N08Qf44Wq:Gzyyyy9u9gYyGtSBAF7/NOf44L
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/IBeam.cur

SHA256 c288e4e4fc79fd051e90e3b052932a183f2ec9935450680f4c15e405e9ce8941
MD5 1cbf83d76a855ef655929f1d60ad680a
SHA1 c323b0207c20cfbb142769a0c955cbb2bd7f9744
SHA512 bad00a28ea6b4997dbf65f2de4768948d5329cc6e6bb7f204693c232bba68e1c72fcaa0077cc20f21033cb68239d548ead75549be05906117a39f758651c2020
SSDEEP 48:PS7+/u0/u7/uvo/uh/uR/uR/ub/uB/uA/u0/uAhuH:PSi///w/Mo/2/G/G/Q/W/r///Zh0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/NWPen.cur

SHA256 1b1f034e0435dd334b223c684b8cf89920fdba6e201e12a5f3d8d8b28b35f60c
MD5 346a33c0be5c2c79702b956ebb27790f
SHA1 ae4da5fd5674b3f0311bd21b3b46c316a5ef7fa5
SHA512 a51529ebdfec6c393b05d904c803f62057b972407223e7887a57e9ddd192fa329e805387b5d269ad42bf4a1c70425e23674708369b5bccf9242aba6588fd2c61
SSDEEP 24:D3E7f7kAsWR+au+dCOZa8mjpjKzVaBZlM2VkB9QYM8lC5V8:yj7+D+dCOk8apmzVAZOikB9QYM8U8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/No.cur

SHA256 36625d1508de25fdb0ccc320fbb74db44e2b0a61df6d7e00dd9cb9bcf9e02d00
MD5 fd79880e1c65161a5e774c83effce50d
SHA1 2d1e7b2007a2b946fc39697d50b149ca0809faad
SHA512 f64382a2843e20dee792d5430ea62c18021d587ea7fb2e548a33082e9424c7adf974d0a02bd263a5464e0e0f0f0035a3f6b921111365a7f51a1e81408aca033c
SSDEEP 24:DOyt4Q/afvH+6WtSmGmmyMbmcDJ/o6RKu0op/utXf30Zd/SrA+4J+66yXLEH:KytQuSnmoJ/o6RT02/uxf1EfJ+6fXLEH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/SizeAll.cur

SHA256 de50767e1364dd8ec73d4694ea6eb60661880ce82924d7f3ab67749b5a51972d
MD5 c95bd31dcf0d0154e8e3f7d337b65cb1
SHA1 207d417fd37dd78909df278f7eab8c524b199159
SHA512 c7032377bce5694e013e815a4e8f2f6c215c6d7fe900942f929837ae62c68aa69ed6d33d32c2e4f96cbd1d6e44f33d652dfe26345617bd852d2a99eb59b5d5c1
SSDEEP 96:Fm/yOjcD0OPA/M/PH/QJ/48xH3DWyyyy4kE3lrrrn:Fm/y6cD0OPA/M/v/M/ZxH3DWyyyy4kER
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/SizeNESW.cur

SHA256 bdc0c630d81f2117557435ba16230549d2704de67660bd5b86691d958364e1d6
MD5 9d0873289642adc7423c86f13ebe1acd
SHA1 6a1b3e3e30a813e59d707eb084a7ceb7c54350e2
SHA512 92e2237eff33a67170dff1ada07d0125a35da87c9a3dd76ce354da43e1191e994c6dcc3ef3766034f52b8c7918fe9a41d7ed33d7adac476223efe819bf9bdbe8
SSDEEP 48:SPyyy6OYZTg29vNz3uKA/ucV/ui5Q/uvynU:oyyy6OYZTgwNz3LA/fV/t5Q/WgU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/SizeNS.cur

SHA256 564d153603f4af017dcb25b2be4b093e1d388de9401797a49423bd17d29805ef
MD5 3d03057985d1df4171d85fed57041915
SHA1 48c98bdaba1f68a1161ca2ce4f6c7e5f002e5fc0
SHA512 1bce85887535b601ff3eec08ef5a1e681706a509924e4a92c62cebef3cb464f8fc6bb1da36aa0feb4b3e13eebc36e6bd7c3dfdc9edd9301dd5e05f6c601fc624
SSDEEP 48:wtk/7DY/SCqRh9UQ8yyyyyyyeFqPJoSu+5WsXA:Qk/PY/SCMXyyyyyyRBo1+wsw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/SizeNWSE.cur

SHA256 8298420ac415cca475572e70eaa34f76992a400ad2abcd4590e4eab73c06ea22
MD5 fb3ca6debb1e39421bd43b47894c5aa1
SHA1 07709c965191ed7b9e582cf649cae2344870a71a
SHA512 771c67c1af26774b28069c68e634dc5882ad4a05d43ebf0c969e2da8e8c7c1d2237bd10b36ea914fbc3852339a4d506a72d6af9a68a2b16f1ecb70d998f33513
SSDEEP 48:CPyyyrN/uaM0/uK/uroju4W8C+/A7+/3/796yHo:4yyyZ/n/l/tg8C+/A7+/3/79I
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/SizeWE.cur

SHA256 7f4965731b869afac6d98e5060686f4903988d27cb70728ada0c875a4077dc82
MD5 10482d0ba66702fb001f0b2b2114124a
SHA1 29661fec9bc04c9bd42e5c08d60219c2699c2311
SHA512 5fad9df9f706302f52ae463887f0f9e28b647ea76de9ba73992ebbc62d7af8149470c654bff6137611a556e5f6edaa2f1489d1ea13d54e57338bef43ef5eed72
SSDEEP 48:HdGmuHg/2a/uUt/tf/uf/uBoG/uEo4/uCuLuuJ4MwHHTYMT:9Gmeg/1/9/tf/0/YL/44/yCI5wnTZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/UpArrow.cur

SHA256 52de71091e7a21949fab52b0719c382d82ef66c4bc9abeaa8dcbb703319e787c
MD5 7073e8cd6755ae2ce22ff2ad625dd007
SHA1 56c52fad6114cfe61bd12e9653d2b0e075995e33
SHA512 2e419876139e7f8a8ce92ca40709f54e2636ae826187cf88fbc840a674eaf3a70e47a6040394c4822b57d08175afa733bfdb33af39ae3c3c548c6066749a9f02
SSDEEP 48:ZVvuIyy//uU/u9r/uG/uAE/uu/uOL/u7oV/u4/ubu/uUuz62P:rryy//v/0r/R/pE/p//L/V/z/9/XY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cursor/Wait.cur

SHA256 f0f4fe6003bf6a92a53040169f1383eec4a66e9136cec80f83a5b1c2ead28e68
MD5 4d82aeb2137605ce1e530c9189a5cc88
SHA1 28c5f56787d3524cddb8cef1b0ceb611c983b64a
SHA512 b25b5dcdab8500f887517ff0f58185e2a84ace4da27c1bf40013f84d8c0e1ae5686a5099be6ad8e55f6c5b4accd72cdeb289eb83ab970f526343a340e192d272
SSDEEP 24:DeKTtWtWtWtWt30Q/OXvtgoSVTwPgCkMmWAuAGmEcaa3/J0xFKNBkCS1xBk:aKTtyyyy3iablC9+uAdEcN3/wKjKxBk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ico/1.ico

SHA256 04fe5031c72d30c4087950d3302d05755e3fad0b9e36a7f9ed17f8818d157373
MD5 108f52ece04ac8727ca2b67c3597dacf
SHA1 71986e45c9dae70ac502c102e7eabd21d97731f2
SHA512 1f6511caf0ac75224594ede21cbca535efda0caa49ca8fd67e16136462a8677a323d0a8965576556886f00940b701fc933ce8d5b54c736d27eb1c38888a0f2bf
SSDEEP 6144:6llllllllllllllllLLfAavgs6TnfEC0b4iS1IbdxXkKB4slllllll/mo09w:wAaIDqh8KBFxd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ico/2.ico

SHA256 fee9fce590d62b70341fcbad847a876c405f0900b242f7e58856c612debc193c
MD5 bf3dfedf8890e85a0616b336d9d7fbae
SHA1 80ac0473939aa61fdc8a7852b13fd80c48aec741
SHA512 84ee99b80868bf93a3cce93bcd89677b26723afbb08a125464b7765a5c7389c39d76a0196a1f178dab66cd1631bac1cf1ea0b260eaa92cf3faaf933bc0c8d88d
SSDEEP 384:4CUWSWpBR0jJvtrbnIIXR/nHRoomTGf7rO+:UWS+0tv1bntXRXmSPO+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ico/3.ico

SHA256 24994db1dcb04d38f37c287273bf8caac235f8f4be2b0226c6f9e471dd5d2866
MD5 48bfcd1ef0cdc2d3d9328344b884cab4
SHA1 09924ee3eae14f34205c61c97bc2b9bb23fab164
SHA512 b2aaf705c997298c194c463092318151ba40c19a066d89fe70cb4a5ee7538e3788c0de9aa134272e63464eec9b0f28ea94e4b1d7b116729dd358593faffbbe79
SSDEEP 384:bVUOdUS8wDgeuTaA1s19gtEmvBr/oa8AVFRAJ5nx5JU0DziAoPE:bVrURwDnIaA1zL/oaFVWnx5B3loPE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ico/4.ico

SHA256 f1d91c6871a572818337167332964239dba76f22c4ae33c4d8e1f649e86ba3b7
MD5 9d91c99d7ffd90766b78e7c36716d10f
SHA1 d849a797a2e49ffaa770581c5b38e44a19e9acf3
SHA512 494b353ba6ee4a04b6137fda27b24e863b769fbb1573f21c264a87cd07026ee4ec68af37f564dbdd6603f1616df253f64d4ae683a6a43a7ac936595ae502b602
SSDEEP 192:kQpB/tr0PFI++YUbVIyMjJ/AJr2P5Aq6r/Zg3W0rcW:kU/BT+vUbVFM1/6q6rxgGY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ico/5.ico

SHA256 fcdb0aaf4d03548c1eea19225dcfef3965f3bb2f7690325f6a572758323536b2
MD5 e2cc915735c4e6b767cb2f1b947b2066
SHA1 8ddbfe868fd3867d17b8b8e2106c1716fe08563c
SHA512 fc970c2bc707e395346c9a3d6a22836ce97f7aea1bdfdf2a254f94a9836dfa4d11a8e1d4e4d1bb18b3f4665ffd5397ecc09cfa19a635a6f7c94e7800f39ffba8
SSDEEP 192:qv24Uiq5GhdqacBj0xS/yTSEki3HB3sKyYkANS3G14ZFI+sqqO9W2yR+b48OLPQh:qu4AU836TSERVxNSy4nznWLRLJjMo4Nr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ico/Thumbs.db

SHA256 84ce52896715c58addac7de02ee1a2cc8c6d5f93a2ba414e900f6954e0d8508f
MD5 c751acd84972e52237be417a501b5b61
SHA1 60631f3b4c7589e4596a582fb8855735fc1bcfee
SHA512 8ed89efb56754042cd65a0b2700684ee4e521d07f80bc5a43e8f9451bc7e67598bfbd1454468389726ca36f636c6bdf5f2cd8510b6297b9f1d889f1152a04708
SSDEEP 192:Hd1eYPgasCk9gRHFbYJoCqxaG1B3ldcEcGwU1:HdjPgasC9RlM3g11zdcEcGwy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

uninst.exe

IMPHASH 099c0646ea7282d232219f8807883be0
SHA256 5a8202c253886c6ad5a4c626b72e4cdafc9075f8b8296829d1ff3aba4e7148f1
MD5 765f54b192c4bf31c01fa469894034d9
SHA1 3d53eeaf5abab00b30402ec6947a9d2fad1207a8
SHA512 b50d2b5b02eaad26ebeea66f1d1e4a3c71180a98619e1c80a536f3a289050d50fe884fc0023b4efc71d2cbd5fe4fea5f3fd9a03918d9e9ab6c5c67486493677f
SSDEEP 3072:lQIURTXJ+2WrSfqW4C3ZtmltDcFtlEesQgC5tM:lsc6qY3lEesQgCHM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12860

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetFileTime GetTempPathA GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetWindowsDirectoryA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-header.bmp

SHA256 28902fe636c0bc69a7fb0792b4e6a3563fb90e6aafd4de70b684d96d629042bf
MD5 55feb690bcede1e2c9e287b0db4d591b
SHA1 ac995ae094bd956b9b9dd4e966e289b6eea71fda
SHA512 b48bd71df3f94c386e4cfe7df5a2327e6283ca6ce10dd76e2a7ac29c89136ebae6b4bc50a95669456eb5ac263cef048775901d9223755aaa7bce02a608acd6ad
SSDEEP 384:05ypB1KKjycASiEkpUvtLxnKSCnJ77sTXGROTMsHOq6PC5tEQaq:CIB1zjyF7EilnJfmy9qJtEQh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ε.jpg

SHA256 01410114324ca425b0d80f2c9c78f18424abf1b9459ae135133298eadeb0c5df
MD5 808033e4212a6c5ba7822d0c989e74c1
SHA1 3d965edf20a2f39338c280b5da8b8496e38e9cf1
SHA512 fe87868b17cd8713b2b992faad4fae3440a6c58089a641f3b7fdd140d8b6d7f19b9c64b83de9cc37acb434b6865706a5cf0f846a43b3c7b778d7a69fe62004fa
SSDEEP 12288:OMN9q2Ce9hZwkMGw207HftqAOYpMtVMUSvhYUmy:GFAqj20gAfmrMQy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ε.msstyles

SHA256 630596f38ecb85d84c6e2f486cf8549511e3fd54ecca5d107bc641fee84002e8
MD5 d202a3ef1e0eff6c6713895f4a7aa158
SHA1 bd1cd6d8e4a52c9a37ea5007dd3ee9884c25f854
SHA512 6905c329a01d79cad1a0d0b9fe56af6be5a08334110132c4247ef47bffa6213cbcab2a2ca5466ba1babe989f0417bb870f328bbb6897fb1c85adf80a1622ff07
SSDEEP 12288:6scEk0XC4hcEvkHgx6cEa0PBU4sc2LaHD7d7oIFaAgD7FfDmShzBXZcgZw/hyzJ6:B48aj7d7oIFaAgUSZi6k
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ε.theme

SHA256 e1d88837fc70526fb1a2b12ac9bf936ba433e868022ca7a8d11d00bd521ad8b6
MD5 68eca4f682a17697571366bd79a077a1
SHA1 25635e8c431e69555561986c834310ab00172ba1
SHA512 70b67c04163a7d1c04dba810f24a90395dbad35963fea00b0aa54cdda69a13eb788ea09463ac46b407952f4d1c52bf1e0341661f50f407cd67802a2875a10c3c
MD5 SHA1 SHA512

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer