office toolkit2010 ver[.]2[.]2[.]3 download_patched[.]exe

resource
office toolkit2010 ver.2.2.3 download_patched.exe

office toolkit2010 ver.2.2.3 download_patched.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 952fd0fdbf616ee1e94b522abff96b4f9c610b24be05d8daa9b3920b98dc9d2b
MD5 3e04a83946205df02e7298ad1d7b2fc8
SHA1 6251a3680754f23b2f4b7473c7b157658c2acbe6
SHA512 8ff9d98ef248358494cac7693bb5f938b89c2acc4f48fc043c8ced045a9bf2355e3fcb54237b4cd36b9cc1df6f3fe4efc9a0dfaac9b19ad7705c5f0b03982b35
SSDEEP 24576:Z0aHKvcG1Otglz5duKg11sTklfJ94qt9h4eFeCNmdAWoTanrd56A:ZsvcDtgZg11rlfJ9tnjUCyZoTYd5L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13289

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

AnimalsControversy/Lycos.jpeg

SHA256 63ffaf7e15c6c3f0b31d250b44030806f471b22d544c9f2bdcb82d0bd2390535
MD5 ac276273435b29254572080dc83d06e3
SHA1 178a5efa447a50a13e77a7c5065beb376029a4fd
SHA512 89c7bf550abd6726c51a078cc524482cd045fc72756e719351efcae6aba386d2d26bcbc19ba9e4ea4b582aff69c21f9e05b562162e2256c201a4b0a51386b9b3
SSDEEP 1536:Xey+pGh3cG3CrY1DnePGpNL67kOTV5csx7AEBNXx6pqK3SjEVA/Y34ICUa:XenE1L34Y1Deq67kOTjcIDaIgSg6/YIL
MD5 SHA1 SHA512 SSDEEP

AnimalsControversy/Mental.jpeg

SHA256 62d52e1e2a82b417f63dafac2f2109eb9ed3f54b7d75789ba96b0cd1f6e5416a
MD5 bf67aa2d7e9d4a0e2cfc3efdc6fa60d5
SHA1 70e023a7413e45240cc0aefa6659a9b1d9af900b
SHA512 b1bba696c7361c12ccc45ca6397ffdc0aa4991e1168c60f586e9979ca8cd325d41ee5c0645f84be3a9cebcd7fa63be3db79abdf8bae1be428cf22fc9c6ba04e9
SSDEEP 1536:N90v+DnR8nqK0EcssguS/Os/YKq1meCcNf1T1hqr3me/CLnRBkkI5:N9Dan6TTS/1QK0CWf1WjeC
MD5 SHA1 SHA512 SSDEEP

AnimalsControversy/Nike.jpeg

SHA256 08aa3a06e28f6bbd8b44159443b9620fdb4dc22856ac681cfe50260e7e865911
MD5 57f82b3b61ec60d51e3a5c666db76e21
SHA1 04a0d402c1e76a9ce9d8296335b962b58dae2ed0
SHA512 d35afe782f1dd3bb572cb464c2e71c42c8572bc69bcef06788c86370792efaeaef15e92c0a3390e251895406d5511f095db90b222f450d913c165323cc5755e3
SSDEEP 1536:yYejEgOaxMKFo7Sjbo0I374fdPARJAwJSQROpAXRRrVgBXg9B:hExMK7jUlNRJAsSQROkVgBXgP
MD5 SHA1 SHA512 SSDEEP

CookieJenny/Dimensions.jpeg

SHA256 0165903112c4c010ec6c41a97c8485ab124a460bf86aef38597c8099cf52cd3c
MD5 51605f5d28c73db446e613a052fd81d1
SHA1 16644bcf178fecec0c9c1203b53519cfd5f70ad7
SHA512 4e5683c2d371bf813c5f028942b84e330cf5f183a645bbffe98c1df68bc8f4db5e53ca02b10721a95e6881223043ce3134b51296b6a0e1c6a23ce48e38a9cbba
SSDEEP 1536:YRzASC76L92sakDfRmt00aXG96QPuV4nlI+UMCnY6Y:YR0wzk19VGSlI+snu
MD5 SHA1 SHA512 SSDEEP

CookieJenny/Gentleman.jpeg

SHA256 f9e01dd72d34f2f2208f064249e8961acb8d28769f3d75681738ff1bb8616bcd
MD5 0b1991df5b841ff03ed71be20e44dcf1
SHA1 509820a97ca462cb3df87fd4c1dfe995e0f872f5
SHA512 d24c0da5d669218cd8ad337c0fa2c9381ca568a259d59ed03aa84523bb3eea25cf102a9f79a3c304d7641fde9a59397466c123db554d0fb535f3add3f21672d5
SSDEEP 1536:4WWNpwNH9RwXRwd3cloSOVyK5+C5N7orZ3ylNweoZcY+nMn30kixaq9bWcZJISdS:4zNpwNyRYHIC7ohyHweE+4Vig8JISLI
MD5 SHA1 SHA512 SSDEEP

SirEntrance/Decimal.jpeg

SHA256 dff93ba671e2aa0d69e38a615c4b5113066f194a515391a0d75caf9a41ab44dc
MD5 281e7f39afcc19b0848c2165d4df787e
SHA1 3e9e1edcca69ac9814beedad262eaec2cb4cf1fb
SHA512 4313273527effdde38002a898b49c6b133a341a2ff13675595d8f45306faa6651621da2a4ae4ce7f285c9c9227bb3db5faa3816e8c56b4a6f1ce29270a3feaa4
SSDEEP 384:RShqOW8drmSBj4RuFoB0TFS5tRLVOEo7L3IZEk5L290K6VzhJVs:QqR8dzsR0TFMZcLVk5G05i
MD5 SHA1 SHA512 SSDEEP

SirEntrance/Ext.jpeg

SHA256 30ad689285c77759efd39b300eab15df3ff139db2f64e2f27c0986f8145132ec
MD5 d72bfd4f8c6a7413f538b36a6886cbe5
SHA1 73b889a05d60e301f605bea8f7a7af23be62d595
SHA512 2cb26f733469dc051f8c200a9b21d57da181c4d7d2517b169a93782cf9853e84428c44c31561e0dbe4ece641cd397be4ba374cf581db78e3b461c1e5f26f55de
SSDEEP 1536:jAlL24rWkJpl14JyceRvoFjdB5cynz9uFt7Bd8agCd6Cmb:kl7rXpL4sceRvoRB7hxagCdgb
MD5 SHA1 SHA512 SSDEEP

SirEntrance/Invitations.jpeg

SHA256 edacb8230439a7c2a660faa58e821975a7211389fb43f3b540adaa686bb39bed
MD5 775eaa606e6551a10d8028943d80e062
SHA1 f370156f602bcb73b4a5ce6a12bd73906a03e7fc
SHA512 4c0a385d49d2cca3985b0ad19f1a35827b0edf9bf5ec57d795c9a0eb11c569d071adb588303725e46a1af48a3d9023b8bd364ca521ccb8f0bee79613892cb556
SSDEEP 1536:xaLKn2RFkGozlc22IZBc91CI5+L6mGRg7+g/f9tzSqFDHqxKPMj7ooLFREysMQes:x28Gcm2ZZBs4IYG1Rm+MVtz1DK19L/Ef
MD5 SHA1 SHA512 SSDEEP

SirEntrance/Respiratory.jpeg

SHA256 f3edc37c6e8d122c1e67082c60dd995411d947f07efbdcf888cc7ffcb050e6b0
MD5 b8b2e18a70b80f9eb413ff6590ae5e52
SHA1 fbcbb07e7446a37c3dfe7a7fb009693888c2109f
SHA512 ea728923d939eda58a30da47049ce392068d5b1176a2c055b06a638fa996c49615cb1c0c9f5cc2a2113837873cb7b6a614a903bddf1b19483a3d2fa5e4f5e282
SSDEEP 1536:OoJ44JYPbDQYdv8OGsE0PeczDqGfF9BYMRXIouY19+Ftb7:OBr4Ydv8OGsEsecfqG99nEdP7
MD5 SHA1 SHA512 SSDEEP

SirEntrance/Seating.jpeg

SHA256 0c25d1320546be3ca655b39db34080a2c1aa7b10f37f48a531bc7b9f81c24f6f
MD5 f00bfbe8934e7c5cbca2e8277608ff33
SHA1 a6e350c144da6a34ebb5e6656aacebc2278d478c
SHA512 396c7f3fad25b3e8cd7ee346d6f8137abdf109006c57b12465e32ba516ec198eb09ad4bd832459e341d86a7484149f38f7eff76f7451db36628c91e2e514b8a6
SSDEEP 1536:DmxTrQCk3CaDicVEuhd/onAR3bjJeADPUAo:Kx3QCKCaGcHuARpeADW
MD5 SHA1 SHA512 SSDEEP

SirEntrance/Serial.jpeg

SHA256 8fee5a4c33760ccafb4cb381bf791b322484f8d3bf3d924cbbaceaa6085d3fd8
MD5 c66afb4f31e6815a1415b9273da17407
SHA1 e8bb22c03018e98b22aaee6fa72b3dc30490d7ff
SHA512 7d9be0e72a11b092d854bc98fda85df59ff430442cde5f6445a9a0bf6720c51ab8246092732f0911e667421ea2217233ba0b4426f13c6de82797f8a24bb6be84
SSDEEP 12288:01aTcSTMTPQHijBAOg5k7Ng6bb5T+Hz6v1r2bnfbUt6Am:QawS4ToCjBhgo2MwmNKEA
MD5 SHA1 SHA512 SSDEEP

Bases

SHA256 38ab7d0bbdce43d343cc936977e5995f444f74445a098581b963d52da04cf128
MD5 e405acccf414f398cae3a8b5355ad062
SHA1 6c1ae1e09e61c23052a373e1fdd7542d0af236ca
SHA512 d06c731a6a1e053434fb415671d2bf74c9dbfa3eca8d58b27f601c4e47148d18e6bd73f7cb6e2cc3d30a98ea9a530837b452115f45ac57154a393007dacf731a
SSDEEP 3072:VODOSpQSAU4CE0Imbi80PtCZEMnVIPPBxT/sZydTmB:AiS+SAhClbfSCOMVIPPL/sZf
MD5 SHA1 SHA512 SSDEEP

Centres

SHA256 8c51f424544e46917831f54a3b356ab8dbd02f75cc5a7f628d8ac83f299a46fd
MD5 58a04f0e8abfdc475e83ebd141a2a84c
SHA1 b9e763d9fd8e2507f0caed0c1270301c6fd408d0
SHA512 7398dce691655ecb6a5a68289c065297baa67621d1fca32747da93d4765705dedeefa5163bc9678980f89a4dd8b0884ff0ee8e92ea14f8da8e910509abb81710
SSDEEP 3072:LxlHS3NxrHSBRtNPnj0nEoXnmowS2u5hVOoQ7tC:zHS3zcNPj0nEo3tb2jk
MD5 SHA1 SHA512 SSDEEP

Cooling

SHA256 2aacacbaeb5cbc7eed11c1ec7b1b7a7f5bb217becff94e72aabb306d0eac1a45
MD5 9ccb235e8434ac249edae243c7708b02
SHA1 aa691d891b916447ee4c4c23c1b4a0f1f0aca56d
SHA512 c4a6760927b2516beccd7cd31519074a3d7bf0a8cd4744bfd0e3d36d7e5a7137f8ac250849a1e5b56ef8228339d836ec2ff0a9161962bd0a53d1eeefaec477d5
SSDEEP 1536:XhxjgarB/5el3EYrDWyu0uZo2+9BGmdATGODv7xvTpK:XhxjgarB/5elDWy4ZNoGmROL7F1K
MD5 SHA1 SHA512 SSDEEP

Creator

SHA256 76b170064022afb15a86dffecd3a3d39a590a236c5b8f38662f6af373b1c5858
MD5 eb204369812009c6f13bb5a652d0f8e5
SHA1 4cbe584d8d27b963e4bd450753a389c9e149b942
SHA512 261c71c7e292336cf67cc86c9157613dafc8f97d16fc9798b2e388c8b9ff44f7f1f2e4259a7620e175e66473044db6620323b1547db4a1bff57c039244ccbdff
SSDEEP 3072:N/Dde6u640ewy4Za9coRC2jfTq8QLeAg0Fuz08XvBNbjaAtsN:N/Dd314V14ZgP0JaAOz04phdyN
MD5 SHA1 SHA512 SSDEEP

Currency

SHA256 a52f36a71d47c2461c027fe9e8d28b23d8871b168eec2adac607059dc88fe2dc
MD5 daecfbfafa4a383c4e20f417d74c96fe
SHA1 550f82af50a6e64a7d628d2be583c776c23867fe
SHA512 e60ec3c084a1860c5681bf978f9d9d516dbd87f6208088a241548b64da4e5e8899b1809340d977c7f588315c9c828d276e005a307a5e9148036ed89691d034f8
SSDEEP 384:JXoSpu88888888888888888888888888888zv888888NfU84444Qnoooooooooom:Jx/SGKAGWRqA60dTcR4qYnGfAHE9u
MD5 SHA1 SHA512 SSDEEP

Electro

SHA256 0015353a312bd09264c6663a529ecfda35eb15e2d67f3a60fd0f4e6636d4113f
MD5 eacc92577e74d39e9ac19d063b2848fa
SHA1 fdb184ea64826279b3eedddf6742d10b9111104a
SHA512 828e98d81e83917d8b37fef02f4f92ca9a03d2565667c6b621ef2548f3b365bcafa5c338c704c9e12c568c7df9427a5770fac6597d7bc8258b7b9ac73dae939f
SSDEEP 1536:n1/AD1EsdzVXnP94SGGLpRB6M28eFvMVpYhWoXj:nZg5PXPeiR6MKkjGWoT
MD5 SHA1 SHA512 SSDEEP

Feof

SHA256 17f164d4452549f533766417be0fc3d7f107d919e59bef81559b85d0e1d028ba
MD5 684a4d47a475dc2c2f0cd6bc7f8a9a2b
SHA1 4ccf46424d50a6f825680ae8adcd80799e060576
SHA512 fe8cb6a099a1cd1e54567f6ecbbf74a40fe9f6816b25c4ecfed73997ed7b35b10441c65b280c3401466a3747171bae9d9889c7812ec435744d05230178494695
SSDEEP 1536:Z/M26N7oKzYkBvRmLORuCYm9PrpmESvn+pqFqi:pT6pUkBJR8CThpmESv+Aqi
MD5 SHA1 SHA512 SSDEEP

Itunes

SHA256 795c2f06860b8dab4b7839ced40b6eee6064114fd69fd29deddf5dfa494f2fd0
MD5 1d5ac0817d99fc0763f660881d81ec1a
SHA1 527caf5b498fd0ea746f2a55644db7d3133fd0eb
SHA512 7950afc856c2c32a99755c0093da190b3b2ddce441ed903364ec269de36409c6b8fd09a69b2e0137d8b06db5f9336baf548b1d1c8c023ca272ef592c397c9b4c
SSDEEP 3072:IlJUPdgQa8Bp/LxyA3laW2UDQWf05mjccBiqXvpgF4qv+32eOy0:dgQaE/loUDtf0accB3gBmmLz
MD5 SHA1 SHA512 SSDEEP

Measurement

SHA256 47c44ba92c5901d348230d9014407eb1f6e5c1e1cb806ad147fb07d96cc9fa77
MD5 f706b8f6cc1789bfc54b4b8095ed58cc
SHA1 21143361eed02f4cf69198a1ff42fffb7bf0c8be
SHA512 55094c02db13400336d6f0cd9ca5bbd913c5dfc9adc39d0ed34fea878a696955807626c4209eb26f6b789bc61bfab6c9634af54b087eac81ac605f8359e7624d
SSDEEP 384:k2ETHwWV8tnwmTihbn929MwO/ChZrzmZGhLdXVaeCVrVEVFJ8ZcGwGBk7/UMQ3rw:kZByLiFuO/ChgZ45VatJVEV3GPkjF
MD5 SHA1 SHA512 SSDEEP

Operates

SHA256 8f66266e862cde7c8fb369bc307faa9358b5da3e36562160ef68c3f669bfa6a6
MD5 e64370ca67ef503b72603709e1d55abf
SHA1 6c96abbaecded4a1a6ba32a2c3191cb58a8f620f
SHA512 ed1428cb005c3395d76e9d8bfc6c319e3e9248382cb3ca94637941b37722198e4b01547ef3e88a46b786af983d5594350c4a7fe29e883de1a380955231ccabeb
SSDEEP 1536:9ynB6GMKY99z+ajU1Rjv18fRQLTh/5fhjLueoMmOrrHL/uDoiouK+r5bLmbZzW9C:UnBypIbv18mLthfhnueoMmOqDoioO5b0
MD5 SHA1 SHA512 SSDEEP

Princess

SHA256 62b827b42fb569ed46bb179b7b466c270a92a6c37ee29a07c182ceae93c95a98
MD5 ea0f2a321f2df42a1b4d52c0710e0ce3
SHA1 749208de473235841a3e3e2e7e77f89303ffbe46
SHA512 889c3a59ff6394ad52641c208bb5e2eb62e9a6b59236927123d498f3cb17d9ab8abaf5edff3b0a8579ec632d606715931f86aa3c613b3c2cfd367eefdc9bb3aa
MD5 SHA1 SHA512

SirEntrance/Warrant.jpeg

SHA256 bf61b2689d4e7569cb667d3ee342d8a4d4d87d528a38dc6b74e171d924bf78cb
MD5 1af409d409904eff3a7367d68a11cb73
SHA1 2c1a3ec30ba4be4271a057857e522f8fe21f3b46
SHA512 14b24214a328753750597b724729bc3d35f7ccabd136c74cfa754f394e1c4944bcb86ae84012f95347516acb8d7aa1eafa19b85f532996a6c7bbc9bc5b5e54f0
SSDEEP 1536:0RTM4igbFwGGXjzjHxH4ci2X1Kyi/l1PD66ut/CFXqpWc+4qD3K9X:x4igbFrGX/jHxY/it81u3CwpWc+4B
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer