𝙎𝙚𝙩𝙪𝙥[.]exe

resource
𝙎𝙚𝙩𝙪𝙥.exe

𝙎𝙚𝙩𝙪𝙥.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 8d78461bef857cac11795429c29efaf490afe3ff9ef218ca9a5a85a498ba2932
MD5 21630cb2f2e86bbfc972eb3e83186e2e
SHA1 92ac1b7242072e6c2f88643ca7c8c77af1d3e36e
SHA512 402c795c95a97e3207115ea53a550aba20f6e4ba751361daa15f055a4fcc12cd6957a08a46138b433d460d1f2ce3ec3b858debdf1bfc44e91bc379f749fb7be2
SSDEEP 24576:L0abT5lpooFIbwO56H6JozCXz62l7S/tf6pLs:Ld9FIfkH6J3TUf6e
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13289

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$TEMP/Approve.png

SHA256 fcb61c93b5d87d9d1fc0b221171f207fff3dc14c05e009b54292e524d537e17a
MD5 aff7b2efbf34082451443b3f5f0f7875
SHA1 0feaca372805d7c78176958b8641d2d400103273
SHA512 61a4e45d32be2904bbe6a4c061c35eaee240c0d20455414b274c74c419bef4584a4f60eede2fe6eddd5d94c2823077df39a92f0f6cbd7c993289261fd0318a09
SSDEEP 1536:JAw1R1QLXx19gT+gTV2c9a6IT2txqQ1LQBdqzZScvzV0KqKNpotMlgAdvSx8XooB:LuLBbI+s2c9a6B7bMBw0crV0KfeAdvSQ
MD5 SHA1 SHA512 SSDEEP

$TEMP/April.png

SHA256 abb12e86ab8529f367bf79c3223ea7624da39f42c8099ecea546e6b46e3959f8
MD5 713706ed16be7f24fa2b2c8206eabb8b
SHA1 12b184e347c1555195b40c819dae346cd379bf06
SHA512 912cfa2453a934b1c87b9c8ba70cbf52d170a2cf692207f8a766ef3b4cac2d75d6ae3b02dcc948b861598bc27eabd67cea2141f7fa44af717da9f2175cf1f025
SSDEEP 1536:3uyCGO/GOjph99FMo8iw5j0aJ2fT6K5suqNVbyGZVBTx:3wGOuwph99GbsmKiuqNVGGRx
MD5 SHA1 SHA512 SSDEEP

$TEMP/Contain.png

SHA256 24c4ce9b5b009f46d681a2dc8a8454ba1fa2b032a17d4cfc15428ff6d91e4073
MD5 cbd654b50f0bc74d54f9949bab040eb1
SHA1 14701a49d85efb515edb393b646ba4c42fd58e23
SHA512 b03615e9e3aedba1548f1046abb8692859a025e40f6924fb22034bf3542564063fd93aacce895e43d170ef6b8e939705ec5e520999670ce41668525d494bea5b
SSDEEP 1536:5fNXYT4CKnBt9Oi/jGpBoww8wgC2mRCtY4jxzN7y:v+Yt9OWYQCmRCtYWNe
MD5 SHA1 SHA512 SSDEEP

$TEMP/Event.png

SHA256 2d020efef2a63350c347604b87dba5e536b2974d83640af2104963844c49a03d
MD5 8821166c7a46469c10dcd89b3b66135e
SHA1 dd3cc521c9da9e40914243fa9852cf4af13e1b25
SHA512 fa1b060b8f55765366b7244161d11c2dceb50d8e13ddd65e02d37972c84c1b3cd95ba8e3ba2586c9ed3ca560c42cf52624ec849f27fcf1a0a5a5c825625329cd
SSDEEP 768:co3VV8CKmAiUYa95qAKZLsd98s0k798heIoMfDxfb:vFSmXa95qAKhsd98s0k798heIFVb
MD5 SHA1 SHA512 SSDEEP

$TEMP/Improve.png

SHA256 c2fb5dc92d93c79b179e698e2a1a6c6dec2bdc0809b67c5aa3cee3839aab6117
MD5 7093bf0108c6fd938ec54048ee25ae1d
SHA1 b7bad4c069986bf9378ae0c7fc2ed3a9406be1a7
SHA512 a73c8a9995b284a5332e86111ba5e686e9c17d0053e24e76e4bd81877a6315f517eb74911fa7a2cc5c11896ac0aa0d086a0e58f16cbe04190808d37b0104976b
SSDEEP 768:8BaO1g8WN+0cgLz6r9cPMypv6ZHDQKVcP47bYKcvfdis2OdEBPUHKHswJ:8bSFigCrkMqv6ZHLVcg7sKcvfdiUdqMA
MD5 SHA1 SHA512 SSDEEP

$TEMP/Prior.png

SHA256 ea98b750b777915ddac7ae2603c3a41581b1717ee59665f4125463ccf1cccd49
MD5 2403eeeb4456b374e219e490f95f0081
SHA1 09f7181edb1b300179696cb8ee6d8a1aed744c5d
SHA512 8a8a6b37525388e5dc0f653e4ffd205b1928aa5b2853f9cae1df60aa438c7756bb82fc2911bc1553db4b20a436791d5b3cefc2b60952bc38b47724266ee3bff7
SSDEEP 768:o2TTWJY7/F1I9O0pq5gqtrVgcfw6d43TkGsAwp8FkP9JdCC2NoFUZjhII:n4iUq5gqtrX9d4DktjpZ9JdlQoFySI
MD5 SHA1 SHA512 SSDEEP

$TEMP/San.png

SHA256 e14e85b98b63394cec504d1eb1a340ef9bfb296e134192275221c77c3a01f3b5
MD5 e7a9dd56ddb38f85b78423c5a8c02fc8
SHA1 59f176dfe3186b2255d11ec7b98048d570da226d
SHA512 dbdf786c29882660912a74c5305c6fa0ade0d83ff8d64f46dd5503eca6828c0ce64d4799288242ef0f71582ac2c2b378abf0694394ed87a4d5afbf00d3d0ab97
SSDEEP 1536:EH9qKkVImwcHlQvUM4ZKYHgEQgc+gvMNmJDD0R9:AqKkVIjku8M4Rdu+gYeDD0R9
MD5 SHA1 SHA512 SSDEEP

$TEMP/Shame.png

SHA256 b20dfd6cbaab63c74b15242af0e4b07a62667e980c5505f80879bfb26a44881c
MD5 573923986a3c04d9f95e878104c8a189
SHA1 abc895882090396bfb78e3ecc6bbce4f1b7fff47
SHA512 85b99e24847c057ceff3149a19ad7ff2518676d33d9e35f3a0c01092db7143145cc95a2b83a1852c26aa9bc07cc3a80a8433781027112b1b211302c591896262
SSDEEP 1536:aI7EaJ4skdjsQPj1doGfPW/FyTTgBjknHw422zgO7JpDMDYYrcMc769kLJ:aAEaJ4lmQrfo2u7pEHmqpDXHMh9a
MD5 SHA1 SHA512 SSDEEP

$TEMP/Teen.png

SHA256 51e29835595e052acda18b472f2877b5f1a997c693fab89c6735d05b680d76e4
MD5 43500fb7d4b5ec763a39088090038520
SHA1 91ed5dceba8c571e3c74d5aad1176292f7831af1
SHA512 9de4823cbc45070acfc6293f5812109e2edd335edda195d6ae54bd333842dd2a5b5ea2fc90d444738b71b5c5fcb1ccd9f62e1222c7044b0937c8c17eb91d72aa
SSDEEP 12288:Bw5QaItJYdZ4qhmIWnlxhhxy5eP9u4Gax5/:65QNCdSqoIWnDokP9TGa7/
MD5 SHA1 SHA512 SSDEEP

Ave

SHA256 8fdb2bd2ae3add41376c705bb1647b3c9163448d9de536d82cc3e19667b48a75
MD5 064791e21a1d928f656d30780188dcda
SHA1 fed2cb9e74e8004f908eb1212a3d6a477fef313a
SHA512 431338ed52680692dfa6ffcbaf9e5181cc34fe6d1ac22909c6eece87ff582e2f038ace33b6d2e49cc910949218ce4757e21d657e7361eb7392e6a83a1fe14c1f
SSDEEP 1536:X2SfuVGHj1vtK7h6R8anHsWccd0vtmgMbFuz08QuklMBNIimuzaAwusPG:GTq8QLeAg0Fuz08XvBNbjaAtsPG
MD5 SHA1 SHA512 SSDEEP

Aw

SHA256 9bec57d3d8c03b3485a378b123bb26bbec1730bb26a7dc945b649ea9566b621e
MD5 ddad81591b9ee8293e5ffdfc54bddc3b
SHA1 57ee900fdee1a2c00d4bbf1ca9a6d9dcb6db4722
SHA512 4936c6d4c82f8e44a33ba9d5b105944bcefd34dc1a5a485d6dc04c6ba87164706467125ce68046a99d7337563014e86b05d4b05fdb823abfd32da350dbf48474
SSDEEP 1536:skvyNf7Xw2U0pkzUWBh2zGc/xv5mjKu2IwNnPEBiqXv+G/UXT6TvY464qvI932S:BaW2UDQWf05mjccBiqXvpgF4qv+32S
MD5 SHA1 SHA512 SSDEEP

Cole

SHA256 12e5c11e193731287ec74957f0fc455a9d86efce30d9b1315327ea3e9eccddb5
MD5 254bf56509b9c8cd23fb02e6dfb352c4
SHA1 b818fddc616983488a7c7aae809ded8b006a242e
SHA512 283227e1b4810e8c20a7f2dbf59b8fc688004e0396e86b2bd5e9b9c9bb8732263ba5798c0ec830e00357264e9f660935f57dc70b3988cb39f81dc6e2f4ca386c
MD5 SHA1 SHA512

Midi

SHA256 2d6d9347ed79dbe7a7f63a09753f886c1c7585894e84cc23356490f04e42b720
MD5 66d839265c12fbfec5156d0a2889494d
SHA1 a8bbb2d4df5acf6d4cfa25b29b5598542d541a47
SHA512 b28fdcff7363cd460d3b3ca7542f51fa98996a7b121311052fd5619a6af632a546bb63c898479306e5bbdc6d97bb834965a77a7165628b2c80b7baa7bd0b6e73
SSDEEP 1536:wKaj6iTcPAsAhxjgarB/5el3EYrDWyu0uZo2+9BGmdw:G6whxjgarB/5elDWy4ZNoGm2
MD5 SHA1 SHA512 SSDEEP

Mumbai

SHA256 ab2237a76b42122bc6a652339600829afa4f3b5d12b03f8c870684b447c28a0c
MD5 da25829e8db22d682adcd66979c5f8f9
SHA1 bab4e19f02b544e60eed7d4b92a868e561decd0c
SHA512 cdfb67d1bbcc71c4a69cee284f7883b723ca2e11265fcab502baa98140e5d62d26c6ff77b6058ed6b7668095327d4d30ae0a72e4f1250dedc9bbb60ed9a83b40
SSDEEP 1536:bOypvcLSDOSpZ+Sh+I+FrbCyI7P4Cxi8q0vQEcmFdni8yDGVFE5gOHu1CwCMIBZ5:bOyKODOSpQSAU4CE0Imbi80PtCZ0
MD5 SHA1 SHA512 SSDEEP

Mystery

SHA256 19d176f4e3fd61d00a5ba5dfe02d51b6f7fbd8f538563a82aa62043f27de685e
MD5 4cac49e198be339760d81d0310ec5536
SHA1 ff92efc3a3e1e1826e49bd3187ee948c280995c1
SHA512 7323dad56b4b5b16423127b97f6a3f7fc6925c37130d030f7f28bba91b306c60377d0e849ff03453405d6ed31e31f102c07d7dc55ae36801a181c077a7c0c160
SSDEEP 768:RTGQ1Dv7sMvLHfR/ZByLiFuO/ChgZ45VatJVEV3GPkjF:RTGODv7xvTphAiPChgZ2kOE6
MD5 SHA1 SHA512 SSDEEP

Obituaries

SHA256 2344c20bb645baa7ddc94a273ec5dc9b3be30f3bcf6460491cb290b081d314ac
MD5 43f5b8f8ee9507aafdde6063b75742b0
SHA1 f23f5bd0af3507cdec2dfe58bed2f07a16c50160
SHA512 3fa3062a4d235df00ebeb0a6dc843318a71166186ce96bacfa2ebd826bd9cb781e0c227cefd07cf1446223bb0fa1d28d448bc435b43ae18e18c5057ed6bdcdae
SSDEEP 3072:HZg5PXPeiR6MKkjGWoUlJUPdgQa8Bp/LxyA3L:HK5vPeDkjGgQaE/L
MD5 SHA1 SHA512 SSDEEP

Privilege

SHA256 d92e76fed399e79af9bc035bdbd32ac4af0ed6f561054706dc704bc670fdec52
MD5 f05511887a8a6e7741cf8fcdcc02db73
SHA1 a6d364c5f304009f48054ab0a75e0c81e85d4da0
SHA512 9de1d02cb5b007776ee3d943ec703792f27052c8df8db142f61f9be469cf5b99633246719b6bcfb304f6ff64cc61c257072391f8becfc88d90f77c1eb6fd6355
SSDEEP 3072:7pIbv18mLthfhnueoMmOqDoioO5bLezW9FfTut/Dde6u640ewy4Za9coRC2jQ:EphfhnvO5bLezWWt/Dd314V14ZgP0z
MD5 SHA1 SHA512 SSDEEP

Publication

SHA256 25eddad8f3af7f36c79d3119640e76c37e4f2cfdf0ff695da4a3c1c073978ecd
MD5 63ca6db75203372935b52000030769a5
SHA1 1470e1e40f87c27e1a6c10d35500c4aab1ddec21
SHA512 e420a55a8bc5a97ba86d6bf90056c0737a058003fe65832d74e9a7a30b517987d8ca31feb966df227450593c8ee4c7b17bbaeaf8daf77ed821f4b5a5da52ca1b
SSDEEP 1536:b7QnswIPumV3BxZxu6/sPYcSyRXzW8/uC6LdTmHwANUQlHS3cctlxWboHdMJ3RY:bMnVIPPBxT/sZydTmRxlHS3NxrHSB2
MD5 SHA1 SHA512 SSDEEP

Smith

SHA256 e3e4f8dda57f40d09ece0558120e79070408385b8b79280a44ae4ea47e3d4543
MD5 50567580fed5e55c3121617a526e1a45
SHA1 a1196a2b87703aa60c5e468dae9d054b77663598
SHA512 1d74ea5792e165b3375f607107ebebea1011158a35b6008b0bfdc9af635f4d72ac86abc2336b7a89f3d42ccbb0cceb1327bf45e081070b2d093f95b423eefd47
SSDEEP 3072:OtNPnj0nEoXnmowS2u5hVOoQ7t8T6pUkBJR8CThpmESv+AqVnB2:oNPj0nEo3tb2j6AUkB0CThp6vmVnY
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer