d72d3f531595aa88b391ec6e782ab8934f6058453eaeb73854535af4b35b6482

resource
d72d3f531595aa88b391ec6e782ab8934f6058453eaeb73854535af4b35b6482

IMPHASH c556b55f19c5e12f0b7120d6904afede
SHA256 d72d3f531595aa88b391ec6e782ab8934f6058453eaeb73854535af4b35b6482
MD5 fead0cb0f7e8442b27da1afe071ddc9d
SHA1 9eb0658b620d512a88ef9349741d471dc572af61
SHA512 639d81ecc8e194fd01657b4dbf6abc2d2fcf20c4e1dfe30d689885c766ce95341e02377d0866b1b8f895c2d9139ee677ebe34c4cf0dc705611c68639afe281b1
SSDEEP 3072:tVkPVBv6z/ZkteozQBtMTyRXUeYaKAguuuHNzia3uhu55MnRlE6ICf32KUtw:ti9Bvki/0FXARlNp
TLSH
T1B334BC862B8540D9E667F738F557348B0733BE6A8C886289DDD83891363C6F12877763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15382

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCreateKeyExW RegOpenKeyExW

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoTaskMemFree OleInitialize OleUninitialize IIDFromString CoCreateInstance

comctl32

ImageList_Create ord17 ImageList_Destroy ImageList_AddMasked

user32

DispatchMessageW wsprintfA wvsprintfW SystemParametersInfoW LoadCursorW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect SetWindowTextW TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled GetAsyncKeyState EmptyClipboard SetClipboardData CloseClipboard OpenClipboard IsDlgButtonChecked CheckDlgButton EndDialog DialogBoxParamW CreateDialogParamW PeekMessageW SetWindowPos DestroyWindow CreateWindowExW CharPrevW RegisterClassW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharNextA MessageBoxIndirectW IsWindowVisible GetClassInfoW

gdi32

DeleteObject CreateFontIndirectW CreateBrushIndirect GetDeviceCaps SelectObject SetBkMode SetTextColor SetBkColor

kernel32

DeleteCriticalSection SetEvent ResetEvent LeaveCriticalSection EnterCriticalSection InitializeCriticalSection MoveFileExW lstrcatW lstrcpyA lstrcmpiA GetProcAddress GetModuleHandleA GetSystemDirectoryW GetLocalTime CreateProcessW GetCurrentThreadId GetExitCodeProcess WaitForSingleObject WriteFile RemoveDirectoryW GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW CreateEventW GlobalLock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode GetTempPathW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep GetLastError CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW SearchPathW FindClose DeleteFileW VirtualAlloc VirtualFree GlobalUnlock ExpandEnvironmentStringsW SetCurrentDirectoryW CompareFileTime

.data

SHA256 14bca7a47517f0d7d87623262d7fa7c92c2f57a69abf2a1fb05cd537896be86b
MD5 7c103e1af2fb5c6a5beb15549eb69169
SHA1 d9d08e015ab3aa03e6bc0fe9d737700c94c45213
SHA512 7c4b7fba9ee5420a1487e64589de7bddd423b4501ec7981ebfab714e7c4dd7ea8428434bfe8ca617884fc26909720ac33c7c43fa0f9194dfba7a27fb77c28dee
TLSH
T125F08C073A15A040F01C2A3E4DC0177C9322AE0499402817E251FF4C45BCA0E8E0C403
MD5 SHA1 SHA512 TLSH

.rdata

SHA256 3bc5f0f16f684c9fd09a02fc71d778f4dbe53e83c9ccabf9b4cdcfa71ae8d27c
MD5 f83c9c68b886a3b73ef34977c7c78b42
SHA1 1d868676b2a40b2058d3485ff937334287ec6a26
SHA512 5a5b2c25018c8809b00db50b0a7564a8075467ce4dc99af7a98e1c2d6d3bf4188b58747658e9f9bcbc0662f963c925b75f57239747241d3b9761fbd77782b838
SSDEEP 192:9rmv8kgTOtnHsL6LIVZPgTyvmAjlNfbt1semQ5WmigSLrknFp:9rmvFyO9s8IDITyvRjlNfj3WmDSLrcp
TLSH
T1C342D89457FD124AF5F36F767DB644110972BCA16839C00DA580CE8E3E7AA96C838B73
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/DIALOG/105

SHA256 425b8270f7ca42a927eae6bea468acf414a3e4b58b5ba2c56aaae4d1b2c11014
MD5 386770584473e271f23dced36427f4ff
SHA1 d14ce95f784b35e4e3ebee535476ebcd3e380c19
SHA512 e7bd459dc14642e2222477a05694db86e526c90333a6e0e711c91a8d5893036c09a27f75855d2b416f3da4ecb59e7a466d82b7cb7abdd56f6dabb040da34c1f3
TLSH
T168F046585B44C82AE01C4B7883E2C3E77133F01016005A03FF89B3869850E9CFC2DA42
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/106

SHA256 4a55bd714f5d50cd8eabba10e57f0618f1842717dcfa582d73a917b1933cd1d4
MD5 fa83652660409e90e0db9731ad2adb17
SHA1 0a8f0af67723c87fe26ccf676b8e19ec6357b4dc
SHA512 d97885f9c2846a042ec3c0d01a756d22fda7a989d55cd61efbc945abcdcfd74ca0284c745cf8bebf2d2fab82718f7b57ab0b701f67d2319ca6b5f55bce663c07
TLSH
T118D0800987D0C068F4704C34643BC5672914F5420C1471CFBDD583BB0824D00EF76241
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/107

SHA256 a7e5ea849cb343e9b58de221aeb25c9dd4a3748070bfba879a30c4265fc39023
MD5 6ffba239dcfcab2080195f23947b70aa
SHA1 bcda1ca8ee9bb9878bde83aa06c670bb5a4d5843
SHA512 93ff2629f63c0600d9169a650b56c2c61eee210b5be7302201de9cca378e10eae85e922b6c2241462ca3abe063fbcdd6183a6e9d6136560eacaf20ede5b2285b
TLSH
T1E0C0126007DBC07DF8044030AEEACBB3B113B080013C5473BD2553531014904CF29282
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/111

SHA256 587a03198c39f990e77691056bb5705e21374281862ce06de94c68172f50f763
MD5 1db3e4c32b9560257ddf3506fef9dd3f
SHA1 6666e0c8336456cfacec71d84415c6516e9e2673
SHA512 ab76d465e4285a156a877760231a39d168310f48df2bab925b33078938ac43899219a5c9f090f6b3509f4a4b2da60a281209b031e18185171d7b7d5dbeb1a851
TLSH
T1A6D012553AE5C50CE5B52DB1ED71E2E71231F800D530C21F6540120D0192900C925B86
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/205

SHA256 349420ba5b5de0b0081e96a686c826e0f409f2f3413f2e9fb7e6f71cb544c325
MD5 c0c4f9be63c9d286b8d1265977ac9d86
SHA1 f9c0d915ded3ea188f342d0e5341e67701eed813
SHA512 c68d19d71f58221e6ed433d4733b2a8ba4d2411557a824c506de162def8b3a3913d1e2840576d81afe5afc0b1e6767d79b7df51d165d0d7cb87d60841daf1024
TLSH
T114F0B6595B04C826E01D4B7983E2C3D37633B0241A456A53FF8D63969950E9CFC2DA42
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/206

SHA256 1a39a3aabdee2aa68c507c55ff37c38722b05b7f8bde66185a2462792381d8cd
MD5 8c69d2c81dd2d9050d0fa94df90ff16b
SHA1 cd71d904da747d7141e5abdde9363f7e240b26bd
SHA512 c07f491b5728a24aea2669ae0680801a1c3bc89ca9c9272b33609abcaf1f85005346ef3f7f997a314bf465ca0d4d6a05074ee4071324c77472bcbf083d58e77d
TLSH
T10BD08C0D83D0C0B0F0B00C39903AC5832A29B5824C0976CBBCDA83BB0C24E00FD72200
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/207

SHA256 8ec647f9650b79179d5afc3e2bd8ecaa4b4617ada8c69c22382321a16f2153e0
MD5 9b3723824cb53db37937eae597b204e4
SHA1 4c8e5e1eb9c1ac7330ed5b1a86b7017659f2ddcf
SHA512 14dd34c136fc5204505fbcdbc33c20de89f41de2666e476da447d418793843d110dc0838972c38ce394fa15ced227c270a11bc986c4f670866a0a3a55b5dc122
TLSH
T173C0112003CBC0B2E8880032C2EACB83A2233080022C2AB3BC2A03232808A088C28280
MD5 SHA1 SHA512 TLSH

.rsrc/1033/GROUP_ICON/103

SHA256 6172a6892c53568b7bb428f5a550ffa0b641ed2e8807d6631e6ed88080acb0a1
MD5 53f94cdbb1fb997e6d30685f32f49cbe
SHA1 0bf455c25817b75b06fe3844e7f1ae1ae36d92d6
SHA512 8f15554c371dcef87503737068a92bbeb5507074bf6ba388d3c98e9bb7d360e1165749e2cf7c9f7a3c744ff0700201dd9e06a4dd03091e958603c4aabef4982f
TLSH
T193C092038B619E1DF29812B911065723413CD2D565250AC2423A29506C131983A3CF06
MD5 SHA1 SHA512 TLSH

.rsrc/1033/ICON/1.ico

SHA256 ba33f4727e16bed03128ba420c620c6c97fa648bd21b5f1e2ce0d9ab96061c18
MD5 bbef87d5cbb1cbd79c234b2777054187
SHA1 43a85c4a62695cba9ab3e781d5ed24261d3e4269
SHA512 3e322be377554b30b04abc04fc1a53c620e1decafedc63553b991f1a4f0dfe6b29022210e29b48bc8407489b1c2f528d9877f04f532b09f9f08eb6deb640ea41
SSDEEP 192:4U4s8G3YVJ/LLYbVJzMsqOPMenJZ44oD4kQcknmvwprha5lAqd:oC0FLYbVJzMsqOPMenJZ44oDk9prOd
TLSH
T1D163C2862B8445D9D657F778F657389B03377E6A8C892288DDC83890327C6F128B7763
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/2.ico

SHA256 be2a0ccf1673af3d5c110b5469a4d5550b98d16c1134032029ddb790bb2425e3
MD5 c65c8f9fd935bdc9f97cabbb08e15939
SHA1 0440fe59132c2498c724a1c980e843925f0aacf4
SHA512 be370b26cbe33bcdf4d61a5a19617b4336aa7917cbb4f9e33838799e0b3443e48557f4f4fe0082c55a8acd0d82a36f06c7a06673e5bbe6e9763b188c4182bb01
SSDEEP 96:+z5rp9XnFAnLxusjZuvbpThfKAguuuHQt/txtCOMbwxntDkDODHBnHdKhhhhhhhO:Sr7FoLxobrfKAguuuHKD2bGpFxCi92U
TLSH
T1B7E213962B4441D5D22BF778F813748B4333BD6A8C88229AD9EC3891363D2F52877767
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/3.ico

SHA256 4fe42aa7ab03f8830dfb89ed057fbae2ac0750d70b37d06456c28388095061ff
MD5 e4e274a635c32af4cd5c509a29a7ce82
SHA1 3900f574a4d7d693b1e601c70145cb9f454635ea
SHA512 1016d01fbf3b1ebbd3fcf155c081beb2b23cd5302c566120a2db546ffef8cc44d3f41ad8ea9d47b9f812ffc5c8abc9cba30d74a4dc21627abcf37d3e16e77ea4
SSDEEP 96:a+2ONGdn9s+z6HmoH3TKp+TSma3uhuye/uF150nafCcj9SbU8Vduz:a+ta9nWHTTKp+za3uhuyaIz0aKc0U8Vg
TLSH
T1FDA2E9866B4050D5E717F338F417348B0333BE6A9D88228AD9E87991363D2F62877767
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/4.ico

SHA256 1cf18c2a71bfd8264c2a1b75cb03cc0cc03548d84f3e6c51364e8286bb1e4003
MD5 617d308c205482dcfff487074b6c95f0
SHA1 58d4356eba05b6d3c3e6ee494a9921b666c58d3c
SHA512 8a37da7f79b3594f5e0ac17d3402c145ba4338c69aa70bba9921877652ae4db6224bb406a58ae6ba321c4530f600140a0f0f17f9a76e2b5b6e1c897888e93631
SSDEEP 96:XYEed3kaqWkofQ+enSSMcx1NcD3iul0p4s4g+cEMmyqlhcYmGsMcYjcYDvd19YRg:yRQ+/Ndcp4pjcEMmyqwRl6f92Sd
TLSH
T1F672F6825B9580EAE627F338F047314B4733BE2A898562A5C9D939413A3D2F53877773
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/5

SHA256 4ee6ea7d959dcee7281c2a15024d3cbb7b9ed34d430d3432f6f67bb4df2937b0
MD5 debf8f87e843c5a2abe3e0858aa4de42
SHA1 74e28ae8e6fb276f57c8789760eed6daf86fc377
SHA512 81e87275a10e6543b8d0e9b4c5de426559ca211182ccd651c7376d85920782100aa90df0e5036b3f6b3b351144fdd64912f7baa7d471f47804ef2a6a9abad250
SSDEEP 384:Fvwp8KKb5R76nGS4wVWXe9rrEWlz7ltbnCsG4h:FvwuKk6nGIV8ehrEWlz7ltbBh
TLSH
T1AE52CF5FA34CD8E6BF5936F96360AB80582E5C56997D63493081EFA0738C1B047A7C86
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/6.ico

SHA256 c0174d7fc0588fee7411daead47f6e5f22edecfccfb160f44a41155fd53c1d86
MD5 5a662deafa2bd7a49fa002542955b3af
SHA1 7c9ced85949250f97a57ae760d730da6c48a4fb0
SHA512 ec45798e0b055dbc3df5f834ff776330380adbfc9c29cb2b5345385e842dbea0da0103cdf6d13055ea0030a78885d9335a31f007d19b965e65148feff265eb22
SSDEEP 48:dvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvwY/7QNuKrmsvHlegb8K0AOXrkM:PjjK1XCCBJALpaJIxnflI8eMmPVZW
TLSH
T1A3123C86779444DEDA13F338FA4B304B4733BD298D995299CACA3891223C6F66477363
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/7.ico

SHA256 0e4958fd0f7356bf72b762b7b057bbb3889239bc1e5f748d24172919a876cdb6
MD5 dfd9fd1226a4ca62485bb8f1e4286245
SHA1 7d77a45c321ab7acdd6fd1219af1a685132e1a87
SHA512 327d2456d751ef6b61df4947150220b25b108046cacf5b0959441bb1bd443bf566212a4d8613dca5359ab3d5b93d75be680402a4860b9533991615b948147ee3
SSDEEP 48:5gczyaTguMPSUhdXBy8cPZj/DSddddddddddddddddddddddddddddd+5j3o+E66:5gczyaO5GZjrH5j3oGi7zH
TLSH
T1A09190A1278880E0D117F378F90F760F03377EAA86862659C9C434A1267E1F62473B77
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/8.ico

SHA256 3f3333e82ffe2dcd91281158968ace1b005b82a3688739a583e55c86d245c032
MD5 99e49e4b3275c7cbc516683243ef2a64
SHA1 056552fb34b6373997599425ca1d657a3322f0b5
SHA512 0ec33a5b7368d245d95007d3ac2a54b021c6f415a14eb08eb6c21aeff1bc5783ba0cb3bca492b51887d0b0c70259b2371ee2244ce2874ee0b0bf06212dfdcd8a
TLSH
T13A519285E64004C1D9237B78F146A807C773BF6B8EA41452D8D8346A16BD3E92A33B8F
MD5 SHA1 SHA512 TLSH

.rsrc/1033/ICON/9.ico

SHA256 b8588d33a12c8bbde3e8aa2c424294b0fffe940a6f0b127db429e543f8dfb242
MD5 cba9e097955aac6b7a3005c411560a9c
SHA1 d093c1c88312c42b91fcc661433fb689fe66eb66
SHA512 93a7c04ebd9e325bf71c38c8b85e2a52b01836816e4ff1b0ec101f3df82b43ed77318fe925439623b919be68e854b7766df1d0acf3bd6836d0ce9d32de0194af
TLSH
T17D21B291238182E4E81FE778F207F8030777BE18C5806A41CED0B4526D3C6F566337A9
MD5 SHA1 SHA512 TLSH

.rsrc/1033/MANIFEST/1

SHA256 1c3eea69b0fb72dc1ddf304b409e49774e964278fa15720e75a4160c8eb490e1
MD5 dc645ee6f9fd52f4332792421e2db7fa
SHA1 7e1bc7e7aca71ec70b0e58346e4edc4c5a1be02e
SHA512 df323f851d87165ba8dc821ade5c5d5ef1be789d484e1601896d18f5823919274b63c1fb71b6b804f579d542e5a369d5cfc5a54bc448652efa73ade1747c33ea
TLSH
T1CC114681D524E566E71202E73FB4F5491579A33B08CC47EDC4C2D77DB602A8BC7131A1
MD5 SHA1 SHA512 TLSH

.rsrc/2052/version.txt

SHA256 e42d573c4240a8b713b6822e3298b41ee7c77df909cef5df07977b836105e839
MD5 47db1a5d9e1f0d15f637c66b93a96a70
SHA1 a2c7812266c07accb3792fbe79d7f4bd58d777e9
SHA512 aad9669fe0863abf656d543afb3ecaa3bb0455204499df4ab82db4e17381275f8408d346ecad3b1dff137e442f700c12bae142717cbb0bf028b6939846cc087a
TLSH
T10B21AF0691FB319CA0BBB9895EEACC7507877910083D961E99CC7E8E0FD34054A11BF7
MD5 SHA1 SHA512 TLSH

.text

SHA256 863ed61d28d7c7a803599512be0b8ca027e7b44e6524843ec9705b9f1766ea40
MD5 03329708374995ca9a339545e3945c67
SHA1 208fb9d73bad85a124805649cbc2f623490c3e1a
SHA512 a3bd3194c7bffbf4c9485bd4d0a1f4bab254c81096b0821ff7acef9b7ed8679c383cbf8294c1d63666c9eb0d4b9cb4b05068704c5bfd0c79e2e68d99b663d4d0
SSDEEP 768:Sdwzuu3bqT97n/T3FBNk76RT4gstC6688sz24rIbAktUimrNZpY+4vQ94hEmcxfp:S2zxOT97/T3FBFF4Dl9z24rIbAktuRZ6
TLSH
T1AF237C53A7C380E3DFD7857028A37B9BEF7BFD5A6404EA43CB924D47E824611291B168
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer