eb97e293d9f1162fb79890e33b0c480ed2dc6ee5486e17dc5685db828f032cbc

resource
eb97e293d9f1162fb79890e33b0c480ed2dc6ee5486e17dc5685db828f032cbc

IMPHASH f4d1e4cd7416ef83f79f7c6a038875b3
SHA256 eb97e293d9f1162fb79890e33b0c480ed2dc6ee5486e17dc5685db828f032cbc
MD5 670f457006cdcf5418d85f4e234b0432
SHA1 1ec067643c5d5a63a4e247c48978f9a3b922f57a
SHA512 ef5bd22d9fa487ef39d5ca936c159b4ea2c75c5eb3f6a2f5e676ac7d27f9dca7fbff04972cbf42112bc36ef44da79b8f03a3223f4bff15d965ac9e1b79ffc44e
SSDEEP 3072:irv+LsMjvFsOTb98xQT+5U5qwm7PVL8fYSzvWQvgeovQljMx2:CWLsKB0Im7+gqWgBh
TLSH
T116B462D9AE00CCABFC3028770FBB763719D76E344A57082DAD5CF71A56385A09648DE2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpyA lstrcpynW lstrlenA lstrlenW

ole32

CoCreateInstance CoTaskMemFree IIDFromString OleInitialize OleUninitialize

shell32

SHBrowseForFolderW SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW ShellExecuteExW

user32

AppendMenuW BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongW GetWindowRect InvalidateRect IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfA wsprintfW

Name

.text

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

512B

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

426KB

Virtual Size

425KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

.data

SHA256 fc48a4f2f43ef99c0e7fa253c76ef876ae28a5fc61bec98d8a342fcbf64afc8a
MD5 473a8a00597026dddeebfbf10ed72492
SHA1 c5b0a19c3f7b82ef72a2e280ce34b0d381f14046
SHA512 586d27de7f1b7678d49c62ded880a6231e6366ece05a3b6153e044b34550632563e37684741bdb648eaf26cc0f79d168740fa7206fa1dc061254e71a92c0ff24
TLSH
T109F04833629FA041F20CB0BE5400834E5B0AEC2EC00AB641752A72290CB8A2348EF895
MD5 SHA1 SHA512 TLSH

.idata

SHA256 30efd99c2d725d20953f79decaf3ed743d677f22bcc737e632c3cecefddbe61d
MD5 e356ba5c7689851cbbab6bda1c5e59d1
SHA1 23978bd5260c1825d4ce754aace0f185af08038b
SHA512 91fcd45f8d25deab6e1494ca67f110be55924945645cc3b516f29826641d1cc88f6a76416fddf83c7d4c7b3be9614d3916c5e25c78940e773ed9d85701b7e1e9
SSDEEP 96:t6m7jfLKvUKXm7jfLKvUKqVF1Duc1tf//2CHxiIVGLex16wRzF6z:Mm7AUQm7AUFVvDucj2CRiVLextj6
TLSH
T182B10EDA5C390EF6EEE30638306B3D4B8EE05395432DE1862424E27AEB66095DF5D3C1
MD5 SHA1 SHA512 SSDEEP TLSH

.ndata

SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA512 df40d4a774e0b453a5b87c00d6f0ef5d753143454e88ee5f7b607134598294c7905ccbcf94bbc46e474db6eb44e56a6dbb6d9a1be9d4fb5d1b5f2d0c6ed34bfe
MD5 SHA1 SHA512

.rdata

SHA256 8c1efb91c2b6699d66da55ce8449ae3ee22fa7264cd1f72004a933671a6c4f93
MD5 ea967d0afcbe5f5f2f5b9b5e9bde1553
SHA1 6774c66fb74d6e9e0fb6a4fa7ce979f283a0b3b6
SHA512 a031356eaedfc0fdd521803e46b300e527f973ccfbfdb6eb32c6c681dc8da4528db6a7a9798b10ca1dd7d85a26b6fffaca506884c45414c8e85495daffc34e74
SSDEEP 768:bOT6SfVabeabZojHKsJB46055Um2Qtw8fBQUEHl+AE2U:bOTb9abxQT+5U3SuxF+
TLSH
T1E1336C2CA7628CDED07AE676C99BDE52817A7C724396625F1F232373AC3E790D41B104
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/DIALOG/103

SHA256 7d256f5d76bc52ec3b05d3c4a1b26dd3bd14ba7df6f16c93708a7f9805ea71df
MD5 86e700d5c53effbac2b967b33f35d824
SHA1 c9bb42a67350d01fe14019c9c4ea4bbb0b6a8584
SHA512 47cdf5fa35799aaa8f7df1aef1edd9891759641a7c8df7d91d3c768749141a8cdd1d839d87651048c7aef57e122fc88eb1ab00ba525d03e9c1f57da04af67bb3
TLSH
T163E0220543C1CF92C800B832029CCB502220304006265C83F801A727B0101307D220D8
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/105

SHA256 e502086038bd072c90060202651011524b40a0dbf222f84ebd39096f8240a853
MD5 ac27bd4e6200488e7e10d0c4375b7dc9
SHA1 8e2bfa859a3d559659c78488f3a12b2417ace933
SHA512 bf1719002e0ea737d41074eaba48c44d4b768504e16f7bb95f82d9b5c4fbfcfb1e588b2be5e3aeb24689a50881874288b3bda15755bdbbe49abb38008eeeca5c
TLSH
T1B6F012546EC4C917D51827B683D1C3D37122F43816151A03BF8B734AE4449ACFC29903
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/106

SHA256 8bec95cdc0c8dbab7674b2e376399f0fd92d68c97a2c5226b97d99b1d5b16d0d
MD5 b815bbabf37bddc6e8b9e55c9d31f12b
SHA1 ac49638a242bb5bb65f8aa883f5934ddf3580df9
SHA512 97e25031fc18f633c61124d98269b846a3179e259aa0cf751f3edccb98c1be8cb49cfe2f17898ae4788a217b85a2048e06901e202d7b55859f147458366841c3
TLSH
T142D08C0DA6E0E4B0ED813CF750ABC1A1AB08B4A7520A368BB8D691370C04A056C23021
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/111

SHA256 c53f8150b6af1f60fd252048650f3406f021642e6f64fde00722c24203526009
MD5 4f322b12f9655024a0906f87e3e0edc0
SHA1 9be699fbc8240382e0a511fbe95d9b86aa6570b1
SHA512 285bc9ba777a0712467dac9782703cd817031f77f8f5fef91a309494e5c119910948437c0c126a68494c23449a469a7164f3318352fd82c94bddc08430e87202
TLSH
T1D8D08C1839E6C90CE5FA2DF2E9A1E3D31336F800E930C32F7580160E09E29008C20F85
MD5 SHA1 SHA512 TLSH

.rsrc/1033/GROUP_ICON/103

SHA256 b4c9741cf3b8e1cb1baeb53dd6ba066c33afd627bcb1fcf4175e4d3146b959ac
MD5 ddd97aae0bf9833c45e2340130d0265a
SHA1 b05dfe921cee243afa68f71e4bf97bc33ecfa193
SHA512 55eaf07c84213031327aaeeb35f947a7922163f66381ef8cb5647ce1df507dd44205a8b07da752f63e7b23016a68be3f0ba48e46a7b4d6c55383158290a789bb
TLSH
T10BC092028B215D2EF2F01ABD41162B13503CD6D5A22605C2832A1851AC131A8393CB46
MD5 SHA1 SHA512 TLSH

.rsrc/1033/ICON/1.ico

SHA256 26f4bd5670678b2acd942c50eb9bf6239167452ee598e5ffaf2606b31975c0d6
MD5 e05d3bbd0684da8316792cca38974cc5
SHA1 d445047b15449ea47c96827389514bcccf20b9eb
SHA512 2ab6a6e1e4e2383a79ddcf34795283b37a6ab4399b6404ab5302c76bbcb3b202a18ac1d31b54cec3dcf42bb440d1a88fee72b3884744bd156a02ea78cad03b97
SSDEEP 768:7a31hJmE0ftT2hfvvI4k/li89vWWncfDxbp1SQBqv0x4upnpKKYU983odOT9Xu1+:yoNft6h3vXk/li8MV/txkAzkov8fYw
TLSH
T1B0441CD22C448D8FFC7038BB1F93393729DBAE785B970800AD5DF75952385A09B94E26
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/2.ico

SHA256 4c25c20e6a7572c08eb3c8b5752098f2226cb90178e6dda5b7b8c5d8473d542e
MD5 7a02a7b8b768bb814fb3fb4729a15f12
SHA1 756480da201a4a0ab65ae0c0a3d77273ef7cb74f
SHA512 9c1663f67944387894c1374238e7fb31658aa89ec07b91a8e1904984a54ec01e737037adf5bd1fbb8f19f98b692e43efa77ed11d8fec1c6866f2cfc6507dc160
SSDEEP 384:0agMjj25+Ja+MJ5TgGCHZjzS1nxWa9ggmVgk/tN3APIeBgrLNIAGi3u:GMTUj4jzS1nzcZ0P8aS3u
TLSH
T15F6350E22D558C8BFC7429BB1BD33A3719DBAE384B5B0900AD1DF718523C1A09B94E75
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/3.ico

SHA256 d12cf555115feefd8803c17003de15dfd0b2873c72207fd95ba8a7162a8464f4
MD5 0b7be549c6b907d0c0d6fd111afac907
SHA1 a8269b647942e69c257563fcd111b658a8176b6e
SHA512 5c393ea43e428705116a323466d4aeee7ffa288b31cf832310dc034b55961c72fc9403e6b97f31a4f2525b0c572dccfa0124c25cf073de0a6e68d867a3e29ec8
SSDEEP 192:LhU4+hO2YrYZeJ6uDgH8ZNrlUOWAdE1kk+fUyjbCRDsVJbqwklKifs3djb:h2eIuUH8TpDa1kk7yCWLqwW9sJ
TLSH
T11203191FE366EC3CD139023218BC07694D5D2E0A60869EBD55D2F9936AB0EC605AF4F7
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/4.ico

SHA256 8b3e310cfa7ab4e22e22b09eb25289f1cf7c51654f38882b909ce44360b518b8
MD5 76e8185f4c5d73a5b0f2f53b58c821d7
SHA1 9fd75b75ca0f434738c4afeb8ce9e0f72e8c8782
SHA512 d3b2738cc4a42690dd5b66961bec43533fef2658e8d145a79a993bf385436a364250712ca42ada649bdbc0f961c015b009263ae3d55d5af8b99fa8f02bc5b070
SSDEEP 192:I2ftSR5fkqL99yD0MNWJESWz5PgGtBEqsMZEAzlHffh:vfIDkqLyD0Y5SAumBBZz3
TLSH
T1B7A26E9DF300DC78C13811311C7DCBAC2DAA2E0999818E3E66D5B75FA578ED111AE4E7
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/5.ico

SHA256 7f645aa08bc686aabb2a9443231c4c47dadd26ae40f30fa031afb10888650281
MD5 119a043d17d643911de20a07a810ae2e
SHA1 06c18e57df5c90a23ecb2b3372fc0e16dcfc12a2
SHA512 85ad1fe45c89b6b771c3ba78a5c9ab8bf6107b0a985098015c15b0102bce9247c8109793c0687233ed9db2691e9d9fd2b26812e310ca4e51853b4399c71c4365
SSDEEP 192:A0MuYhK6691rri7faWvWfHeZ6ktzqKYnVZX:A0zYhZ691rG7faWvWfHXIOZVZX
TLSH
T107722FD22D249C8BFC76297B5FA379371ACB6E384A670804BD5CFB18127D260DA50E74
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/6.ico

SHA256 40f6690671c1a324471d0eb31acbc037068713ffb10866a46e2aee3e2c405367
MD5 f52b6b2770de06b7e06ea26226ce214a
SHA1 83e62d530a49dc38b44cb75469b44b2f75005dc0
SHA512 078b9d188622ddb1836fe68374bd6862c9397b35085fac83741ba347f3c4cba44b880c92f83bb53925fa328514b95337df620d0a44df42ad99e723cdd57209ed
SSDEEP 96:2JhV44s7lnM47SYq1BlFEq7pfoV2gicazhVG2Qngx0UsOlBmQPpOePgfq:2440Y9cazhIU0WlBZZPz
TLSH
T10E1284E02C185D8BFC343A3B6A833A6711DB7E748E5B2844BD8CF399653D524CA20E71
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/7.ico

SHA256 3db54713f6731f0461c106ce8f62c19ebee6b313281100c2d77a8c90444889f8
MD5 816a90d49041f1efccde19502555ed02
SHA1 3ce4e5e2457268d6fb5ff5ad656f62f2e7dabc4c
SHA512 0bc740e327f30c4ee821dac4534e627566fd5e6f522c248757544a28a0b3ee32defefe144bcd60a604b8747b5c3cf3e35cba78243f72f284267701391ca549d0
SSDEEP 48:l+DbstPMolay4ae/ehCXRQCWVZXZ+BB3trki6NR5:lqbGPMolaD/OWBsZXZ+L9rkZT5
TLSH
T1379177C51D546C8BFCB815360BC37D2B12CB7D346DBB11896C0CF71846399708661EB4
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/8.ico

SHA256 4c723d6534ca9f8a6bef2c87ff513fdf2e9ac5cebe7b2052ef60cce373fe8073
MD5 79f5c2d883062d83f410b2553e6ff103
SHA1 57f6427f3201e610be1f515020434a06a110659e
SHA512 a58d528b0f260a6c5518523927a0b52f522c063a50ef0fc579c377b8d353caa47d2c6796c19757229a5a334a0c67ec728c0eec48c81fcc5558da08bca4eb75a6
TLSH
T1C551B80CD318D835D06C2038D5BC0AB2AAA84E0BD8911CBF15D5385375A16DE489E6E3
MD5 SHA1 SHA512 TLSH

.rsrc/1033/ICON/9.ico

SHA256 a496ab0f74f4a3ec4ed2fd529f9dd6a7d6f51e5dc87298b802becfedf2db1d78
MD5 692759ddfb060e25889d22e83331d3f3
SHA1 12b6024f9b3a2cb85c1545b7d82c78384d2c23b8
SHA512 de3985990276e02e3b20d2a677449224a7afce244bd67b5f1686fbf5733bc215875fa0051c459ac010ddfb731fb936728df4af2589db57ceeb9720ebb3b414b2
TLSH
T1AF21C9D19CD98D07EC6E62381E227813078B6D389E7F0A06BC1CF7A5123801860AAEB5
MD5 SHA1 SHA512 TLSH

.rsrc/1033/MANIFEST/1

SHA256 63c0dd9480c9c162ad54f144655ecbe96c6bea8d1fb8c45262f40c1ba40a8260
MD5 3abe4db2037d3fa26cb1968193308e84
SHA1 d38f30767bed8984761a807cac43c4176a78e503
SHA512 eab071c21e2b779c9cb9faf1d00184f61a1002154e1ea137659c94f025e4b56cb745f7e93035e050c49e30e6993505c9209b3a2d88beb096628bece8fd54c9eb
TLSH
T15C114281D424E566E71202E73FB8F549157AA33B08CC47EDC4C19B7DB202A8B87221A1
MD5 SHA1 SHA512 TLSH

.rsrc/2052/version.txt

SHA256 c5f3efb5197d5c381dcaed40f3d7d7afde315d7af11e44be50d7d9c4f92d4d63
MD5 61bd2ea1b97798a42f2376353339813b
SHA1 4b9663e99aee8d2c1b06a68637440cec7453312e
SHA512 4e0d5a8e172b19a593c31e405c3216b555d019a8a075c165f61420b99255b219f13eab565ece32d46d7f57c0c5b57fa6b1f6f60661b3afaee04162ab60b5883a
TLSH
T1EE21B20B96F73298A0A7A9894FEA8C3643533910093DE25E99CD7F8D0FD34051911BF7
MD5 SHA1 SHA512 TLSH

.text

SHA256 b81441f81a30c4829cc3b84af141ca4cab44306df93668359e74751f30ad3da7
MD5 49479d4daf89a8e7998c373e6049b6d2
SHA1 7328fedab03479a087dc772cc6d2cc47203c8804
SHA512 790597560b9868539859fe55303aa49ee2455c78edae3de3a3af4584f5a8574c4b94ab82550769a029ead6b0eb060b65539c757005cfcf88ad72f97f21014870
SSDEEP 768:SEjmvQnLi2HeLrJCe7DGjIi85zzsbf/WFoamk81UA:rTnvHeLrwe71iakGFHmpa
TLSH
T1BE03D71DFB1A81F3E93244705693E1BF4A2496B0EC6ADE06EB640E56C973876730E353
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer