6b8848b38b3e239a0df83efc456ad22bf5e59e7145b59d1f8e154881ebb9f8e3

resource
6b8848b38b3e239a0df83efc456ad22bf5e59e7145b59d1f8e154881ebb9f8e3

IMPHASH be41bf7b8cc010b614bd36bbca606973
SHA256 6b8848b38b3e239a0df83efc456ad22bf5e59e7145b59d1f8e154881ebb9f8e3
MD5 5eecc13df41c8e6967f8a3ecb1d0cda9
SHA1 8ac9ce30344f976a09da51da509dee5d2b0e8723
SHA512 24c981ad16a5bc65738127dc27f2c804f4678671a8c13ff60ef2edcf795b8b6d505d121f407514dfbe7853b5d7577299ae30832319d21e83c5c18f5c638382d1
SSDEEP 196608:2ALE6dWjWnulUCK9vDfaa1RkYP60bs25rXSNBl66Wncma:k6fuiPrfZ1RBP60bs25rXQ66WnG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14511

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

458KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

516KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

.data

SHA256 c56f910b6057a45fbe5062083358ecddf9e603cdb2f2152a95fe80bdc22a4461
MD5 77f0839f8ebea31040e462523e1c770e
SHA1 14806c91c6a06fe4fcb02a8a823ae334457cbdb6
SHA512 1d189125d7bd76d44b169e0885d514f99472c36ca6ceaaa8948bd54861c524b65df00a1cd25d24f7376c0aa4405cc2c139b01d71f6c7633a9218de9760d7892c
MD5 SHA1 SHA512

.rdata

SHA256 05ee265c710ebb6c1280fccc249bbbacf24097d01bc4f9621c554726a40742f3
MD5 cca1ca3fbf99570f6de9b43ce767f368
SHA1 63635b36bd655a189c82d2a8b32e42aa99f985de
SHA512 c0e0c39a80eaa282a5effe0aa76441c7740129024a13dc198ec0d79744a94b82e3f064d63a9e551152c404b592effe3fa3a2cec4da12a9a912137585fbf4a832
SSDEEP 192:xBR1IorPNhxjQFOEopX7Bq343py7JRWVS7yWymPn:HRiaPblQFKnq343pwrWVaymPn
MD5 SHA1 SHA512 SSDEEP

.reloc

SHA256 639b4226380f5f91b49da129fd5566cff48e78fef7a0289a96046a47e1af6894
MD5 bcc1b865322f974509fa95be60f483c2
SHA1 d6dc5f76a0d164068b9c33a31dd96ea55e298037
SHA512 e2d340a8638cda4ac0416142614cab5d796ef98e3f861b978649d098e274c1b9210b6fc9971ae31a8ad8ac163b8287c3e98805c29a9aeb19283334a0c14e5db4
MD5 SHA1 SHA512

.rsrc/DIALOG/105

SHA256 fecdb955f8d7f1c219ff8167f90b64f3cb52e53337494577ff73c0ac1dafcd96
MD5 3409f314895161597f3c395cc5f65525
SHA1 1a99d016d65e567f24449d9362afb6ac44006d0b
SHA512 f3e7394fa49325a7ea46728b77a5e819e18d63049d54c6adf36d08619709484f8bbd20206416d3c1440bd70632d99d9a45f3488482353f90aa21aa6ee3915427
MD5 SHA1 SHA512

.rsrc/DIALOG/106

SHA256 69897c784f1491eb3024b0d52c2897196a2e245974497fda1915db5fefcf8729
MD5 2d12c45dc2c029044aaff357141cb900
SHA1 083db861ab3c7db23c6257878296e73a89a74b8b
SHA512 a50dcf605a914f0a6f94b3f815be159c2b729d005a25d6cc9120c4d34445cae2d0b20df3dbdc7672f316010c6a47079265548a1ed5a523896963b1a3ddf98a17
MD5 SHA1 SHA512

.rsrc/DIALOG/111

SHA256 85025c8556952f6a651c2468c8a0d58853b0ba482be9ad5cd3060f216540dfc0
MD5 6be4e1387d369cf86e68eacbdd0e81dd
SHA1 351970fe2681b9b35b5d59ad052011ed96a96e17
SHA512 b81b287de73282cc5a7337559fbce5af01d1a440f04ee97c6a8e1de0c787ef38936c951b802014b841fc517fe7f2b916266dc8c35cd5de1ad0c630dc2218fa81
MD5 SHA1 SHA512

.rsrc/GROUP_ICON/103

SHA256 4bcf4a8c1ff8a4cbbe96b0449df94274150823f5dfcc35dce50e51c952cce4cb
MD5 6ac8f9ee90e2780aa7fe588d466d9c4e
SHA1 923ae0c526f0bd879560bee1262bf725076a3299
SHA512 e5c2e257f16e3159221d2125e56db82d405e16d369be84ece1b419b96aa47be6cb2ce294a4794e84d0433a0eef2f71c472e3daed6a47d4b4b5df9b4ac3606809
MD5 SHA1 SHA512

.rsrc/ICON/1

SHA256 a59f5c1c1f1b987821b456f282c1f79f4c9c3fecebe6ef46fabaddc12de964fd
MD5 59acc753f3eadade964a4c380695e49c
SHA1 bb5a704f90dfaccc6f093706ca12339bc9115c61
SHA512 849f93da1ac2ee4dd5830f268606b86654c31c699921c2a2914e4e1a345cd572189b4ad26abac8b74cac51a15b97315fd33f651dc516daaff0fbf8213fc71dfa
SSDEEP 192:ig5iy+767XzptcD+RyNSV20Nwro+9aODjLL3N0UoVRGuWNMbb6:B5OW7X9tcDwyCNwro+9aObJAAm6
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/2.ico

SHA256 edf8f92645a924816de0837f82ba448676475d568e88dac7a211205081be6968
MD5 22e31a283e2294ffac099e7fe822990f
SHA1 bae29551845519257758e6469663df06666177ef
SHA512 d3a94ea96b2ce2f62b0545dc1c63b013c98fac701f81eee800e79eb46f1ea05d24a8bf17351ed5efb9d09b540f0860c0e6d5847f075cc8a08dbddfaeb1001d36
SSDEEP 192:e1SbUUzySSPICoSbVmLWN8tUhAj2O8QV4e3V:JDuLzZgSN8tUhAj18QV4el
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/3.ico

SHA256 222fd01a845d63694bceca74ad252b181b6154888186d558e29251c846c2fd20
MD5 560f03359c7fcc709b534b4993ff11ee
SHA1 2df9a0f8d5cae2e53ea1f457e7757ab074405805
SHA512 54014a15373aad405555f8eefaa31baeca4098dcdf0e7429eae1be49eeaefe5ab5a262a633212fe5e9f7d0e6511f3b94793b368cb5120d4f287e1e431b7222ae
SSDEEP 96:CRff48kxLUt/bc6F7SbyZUSVpXrg+e9l6EXV+yYJJWt0hkOVYffffA:6pbc47SbkUSng5YDCokOn
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/4.ico

SHA256 0b7b45b4e21d8babc7d5bbfc395a9368776aa0dc18f3482bdb78ce330a65f758
MD5 550d76de9569488f29198596c7356daf
SHA1 a81296398b845a4895ea6476affa8d9f7ebe26cb
SHA512 1814457817a001d8f8e9ac3cc0d2ec9d4fb18a535210147a616b46287955dbd0a66dfeaad83094424a47f1114218641b41785e04aa48760756b8cf2db20ab317
SSDEEP 96:kq/JjpULRkAdESTUsLIPUCEtpqegl8AEH9EhPVBm8///DexxAtaY:kSiVXGSvdRKVEdEhVsed
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/5.ico

SHA256 adc324f9dff22ea56ab0bc8206a801e3e851717fd0e3f4861e378791c792e7b8
MD5 aeaedf3d085e109be72c3b050cb74715
SHA1 8b6d532376901fbb6d4792ef6ac5f74fd5b01406
SHA512 55553cdb9e3cda8f451afeedce118d1a6ad3bb5663ed4d9799344042c70bf9dd7a9110a6230cc34c6f7c785c769052a5c098bfe29fccf07617fb541dc7cbf5e5
SSDEEP 96:5fdq/3/w7lEB/5U5ANX51E2IsVAtJsxffi:O/omNpEFMKsw
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/6.ico

SHA256 785a9908cf60ec6eab5f611f07cb7bf495dfdb8956daedef99872d2d2e6c2076
MD5 858bdb2a19ab98a63f11c7c1e73e86d6
SHA1 a05c3d57058f1ace84ced1dae4d2812ee36b142f
SHA512 63f4b41ddd3566e47b3790f21b7a1d684bba11b9274a725773073388e76ded4f202b7b6464b582f29a412949f82f6c35d4a560ef0ad8ec3d1b2cab1c4d6b2507
MD5 SHA1 SHA512

.rsrc/ICON/7.ico

SHA256 eecb5e8ddcd2b4421ae6c3a27c2c92f82a8c884f96396c18c58fb6ea08802481
MD5 6c7a335604d5837cb64f4233c5d2f0dc
SHA1 6ec8f02d2a0085aa84245951de503281f467687a
SHA512 48663290a53981ae9d15250268f7dd4a192a126cd5e8283e6d5de3c62b88b800302f48322f19f0cc1cdb2d5effaf77e8f6829b8e8da7bd2420b1b99d5adca630
MD5 SHA1 SHA512

.rsrc/ICON/8.ico

SHA256 10981fbed74887b20e3523d162c8c8d4cd4dd4edf2e4023dd78c962dfd6bfd94
MD5 ebd135dd16b3ff627428efb2e87979a6
SHA1 4f17e7e199762e446065b3ac4c14d03b97bfcbea
SHA512 6ef037f62d04f0e00d197c5b74233d9859e3f5840cecd49013caa662df0ed7654e2535802e7ac3d95e591040a77eba62dade70edcecd8c33c5c14a6a9253897b
MD5 SHA1 SHA512

.rsrc/MANIFEST/1

SHA256 46e35d3bb4e0d1dd59f3321fa8b908e7202b9bdf70151f941d58f9bee9c0ba67
MD5 8ac7761540a25f0e446671e95051ad9d
SHA1 dc2cbe444228a356272452dcda6a5f4f58bec4f7
SHA512 7375e939af102200af9facde9a02296f074f06ca0e155b763f51f0bf0c41b66140d6eceaf720194650cb3bd4e5376d94a36bc9fc42fccdb1942894b9d13a1a93
MD5 SHA1 SHA512

.text

SHA256 97e6da0d74b3c02e39efeb02c6f019b353e9891a3ea453f2fa0ecca3c3e526e2
MD5 419d4e1be1ac35a5db9c47f553b27cea
SHA1 81b88fd425125756d41fada07ae1534b10c43c01
SHA512 17fea0a8c963ec9a6bdc562de750a4f8f527f2555f02d9df88b4e9ad41bdbd7fc37c0a303562f4834c195b485cc61284b6e19723bb376c23e08642884b70c121
SSDEEP 768:JsGPXyrvq/Sb6LbQ7eM468vxRu1rnd6ffMmKZS/5hK9G3/2o9+4gn:WGarUa6LowvuhdNYh2Gf9rg
MD5 SHA1 SHA512 SSDEEP

CERTIFICATE

SHA256 659bcdcf9497d6490074421f59797e8df1e85341b6440b82fff0c29a88f9bc05
MD5 d7304255b6f81b7a38919ac71cc674d0
SHA1 edcdfb6200106061578d52fc52d79f2e3d2e9e3f
SHA512 b30359455ddbeff419abd8f0d2e45d8c5fd1c4ad3155947560267c7050478a466337077c4ee96668750a6213f5556652acd9350f7f6c973cabe6f2328ff655cf
SSDEEP 384:FNy568E9VFzSJIVp3KHM7aDfpwKANy568E9VFzSJIVp3sNsl4:iEsUacsEsUg
MD5 SHA1 SHA512 SSDEEP

[0]

SHA256 65af7b430d580514205c0f6a8ee051a2026f25cfe1a72ecc063f3d9eea96b36f
MD5 059d69bfce8a5a02a44dc984e6b7c4cc
SHA1 ea2ecdd9709df9eb110ca06fe44cd24b55e4fb97
SHA512 a27a6a312243ee3aa93644f5fb6956ce8e071e5e99f6e00ad39b0b2f2f627bf83974515a9622068d4ddb978a7c9f628d1ef76aaa7e2bac132d48776397c847c2
MD5 SHA1 SHA512

[1]

SHA256 0d230feafcc304ba90f1b9bda6cac59f8f67c42ef4b1323fa993a8722a0831f3
MD5 7aca1635d867ef45a90025be04749583
SHA1 42b1b6ea71a3f81b6cb0ce9c3b94f1ecbef44239
SHA512 84fd07c25cb53206c3cbfa13ee20c51da920c35daf018cfd32434052c6e5dcdcc86d70798b48c84d4f6603ee0335976c93fe77888668f400b2bc97c1eb4cf645
SSDEEP 196608:sALE6dWjWnulUCK9vDfaa1RkYP60bs25rXSNBl66WncmD:q6fuiPrfZ1RBP60bs25rXQ66WnH
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer