3f3be2285418a30e43ea658ce146405895d189bb6d8364c424655b462a44e420

resource
3f3be2285418a30e43ea658ce146405895d189bb6d8364c424655b462a44e420

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 3f3be2285418a30e43ea658ce146405895d189bb6d8364c424655b462a44e420
MD5 bb3015a874bcc8e135c170ed43aa8859
SHA1 6d38e26cca791de80424b8804b8323d6281bb1f9
SHA512 e461c9a92a6e901249de756d3ea4399642a5d4190934f233d4aa4891d0455a44f68488ce781fde1da88a3c61195f3ffe0d6e66d90dcee0cb3b9c97c9ae894fb0
SSDEEP 1536:QfHLrLkSRoybCQUZsrs0DC1cuY2EOPLtmzBz604W8p:Qfr3k+o5buDC1cuY2EOJSBml
TLSH
T1D8249314A250E836F863CD3825B9673B3E6D6E0229CBDD05CFAC26092E727C56D8D774
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13650

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

.data

SHA256 0b394d61932417aac0ac358d6e055b7ae4ac5a5e3be7bec1127415c5b6823149
MD5 7a91ec9f1c18e608c3f3f503ba4191c1
SHA1 3c15fde552ffcda63f8c7ca4716ffc5bdeafc0dc
SHA512 b2fc5da9659c1b1b1124c7ed003598e113f7f619b263b6ddbf9b85c7bcb4a64284ec53c35dc4113baae89068d3093c633ca93d9ce62b8f876a43f12558e7ceca
TLSH
T19F314300A3E99609F2F36B717C7888220ABA7C92ED70E30D0240941F2872A04D9FC73B
MD5 SHA1 SHA512 TLSH

.rdata

SHA256 e4a15bb054e962743cf6587247e1b36ec2f1a4c56d5430eab24cdcc336f5bece
MD5 a995b118b38426885fc6ccaa984c8b7a
SHA1 9844579ec308452627ef731b5e1a1241ddc0fa2c
SHA512 f5d9656ab3f2b7c1b652caa7adee254d90bd69fba41aa65cf09a8f2a91b796b4e176b610d545750e6c420fc4b2764bd94688ea548b1fd92b21fd3cfb434bdbf3
SSDEEP 96:ShQrMl8xCBv/omsfhqFdlzDPhxyPYPkcmkJqiyxBjKwrD:ShQrLkopfhqBDLyPYyk81jKG
TLSH
T1D1C1B79619B40A57C5A21B7534BA2D0BCAF8D418602F630421C4B199FFDD1D3C96EFE1
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/DIALOG/105

SHA256 349420ba5b5de0b0081e96a686c826e0f409f2f3413f2e9fb7e6f71cb544c325
MD5 c0c4f9be63c9d286b8d1265977ac9d86
SHA1 f9c0d915ded3ea188f342d0e5341e67701eed813
SHA512 c68d19d71f58221e6ed433d4733b2a8ba4d2411557a824c506de162def8b3a3913d1e2840576d81afe5afc0b1e6767d79b7df51d165d0d7cb87d60841daf1024
TLSH
T114F0B6595B04C826E01D4B7983E2C3D37633B0241A456A53FF8D63969950E9CFC2DA42
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/111

SHA256 f6d446610083806ccee5a86b83c5206339bebb34cf128100f778ce555f0d1592
MD5 105b6270da58ec2fde8a18c4d38f6e9c
SHA1 2c7f5a125ef4a2da5c10371fca6711f6a50fef5d
SHA512 bb5172288bc850f2a49153a2e70213a28b0c2472e29af8f368d1194cf343a939f8c4952668269fa1cc3f8276ad5fe40e6b8a61e71d04abcd32ee8e5fda456c99
TLSH
T190D0121539D5C508D5F52DB1D561E3D30336F410D530C21B7540120D05925008821B45
MD5 SHA1 SHA512 TLSH

.rsrc/1033/GROUP_ICON/103

SHA256 a7d938bee68acaa22864515ec5ef623bf7f4d7db4e9e49eaf399c6d5588bf38d
MD5 6a8f5a2071bf9561c90c9d3ee8b1763f
SHA1 4aab02978e483993565c0cc614e0fc0944b71308
SHA512 da9818bfeff1b159c4910b108d0ac7a0439c4df41447522cf326b32d12ca307c9d49b247b0b5885dbbaefb4860e1a70d62291081a1132f2b377b21f7e3d62ca4
TLSH
T182C092038B201D1DE2D453BC412A1713413CCAE562150BC2472A69906C131983A3CF06
MD5 SHA1 SHA512 TLSH

.rsrc/1033/ICON/1.ico

SHA256 df4a213d844c03b9642f4a3fd266bfe857f6d93b7eb09291f6375e15e069daab
MD5 2fd8c35bd0ce8d867e4d46e611a12b22
SHA1 50819c76369001c92df4a7a2cc52d90c9ecb388d
SHA512 6931136ea7bad70bac2f22254f991b6f3a5647681f18d37ae5c67ef5f9cb1f0d16fcec1d35ed2674dcf65145a4a54ed0a5f3cd1053dc6c92e81dce00d7ae012c
SSDEEP 192:qU55N2fnUDlw/4nXJYNTf7gCHeAy2ocm4EL9:LN2vMlw/OkTfsV92c9
TLSH
T1F063D254A250E87AF857CD3821AA663B3D2C6E461DDBDC08DFAC560A1D717C92C8C7B4
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/2.ico

SHA256 22407de5e8fbddd20cf02ea23d6d57237e8249152ae69b8ef2c89f901d37658d
MD5 e22259c7ec563907c97c581fb67b0448
SHA1 0863295b209ac9fa80b7138ca7c178952f005bf5
SHA512 360efc3948779233cc7f8e8954582f4d65096dd3284ab44656e47b4ac0a73b3079c3597fd7c7ba6b75ee05415b193044448a77ac921b8e87721b457b9d9ecde0
SSDEEP 96:TLlWGGG5ZYDhPziYtCsMYBF+Za+xuFvMeHS4iiUWbeUk2lB9hxr6jJVlfdrYq/XD:TLP415fex4a2RkB3uAIK
TLSH
T18A03CF18E310E879F863DC3925B9627B3D2C2D4269DBDC01CBAD66151EB27C82C8C778
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/3.ico

SHA256 614ed00b64afd0dd82bce3a8340dd3f62395670aa0035f33d7bcad2749b982de
MD5 504d35b03ed0922d570183c87362c397
SHA1 34349bf044f0fb38ad334038b02f4e47dac968c5
SHA512 7542ef000a5eab4cf5cbbe03ed50c7bf20a165c190a8902af4cdef784c0a2f21aa658aa5b0745b1b3a66d952f9034db6522ebaa6ba613e432f73fc23355dcbc0
SSDEEP 96:AAhoLQF1KKE2aunglZrRn5SKaqavf+gYkq+z6brr+qpH0Va3ba5OzS9HJv9eCX2Q:UTPyPJenQ
TLSH
T1D7A2BD4A6604E834F923D97D61AA67373D2D1A0229DBDC08DFAC26061DB2BD83C4DB75
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/4.ico

SHA256 0db9fe3baee635b2bd84864ada0d9f1d182638483e8aa421adbf18592336f4f6
MD5 32a7eb947aed90df2bcda4bc6c9d753f
SHA1 55cb70815262f39ab879c4fa9619ee80071ac38a
SHA512 302b791b025b973149a2b455adee28bba24d7d8b0c26fcb8cff5f482a362bafbb4c3592b3836e83d23380d5da15b97642309a56c982ca4debf2d30c4656de626
SSDEEP 96:W+liVAyorHvd0Ckdw61dP9wuxdXa9dvWmVdGndsaFdMM7hj7AdgdzgZdsAdBd7dh:fPq757VIlp
TLSH
T14972F3049394E838F923DA7950BA67373D2D6C4229C7DE00DBAD76061E72BC86D4C779
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/5

SHA256 42549a31f4e28d04ac212b944072593f5335599b5d2c6eccc46c06f5d2bb5b5e
MD5 cda4d1a57678032cf00f97168b6b0a05
SHA1 e0ebd2e5c08373396739255cc82912efb503fd67
SHA512 99a70b6748ca43744dfb58f5028f9bec676c72165dc39cc665095d49003c7f5735b4d7b708e35a7ea9e91e6de83fc4cc1d62b72bb10bf1a27e7115853ea1c3ba
SSDEEP 192:ZVS8i+VZrE+dIG9GmXI9pasF8OvXa2O2Dg8gysgC3yAqqqqqqqqqqqqqqqqqqqq8:9g+mfmcJvK2O2zgT9VzW
TLSH
T13822AED30E9057595AD4AF3DD6D0EA08A2E04AC154CE3EB81629FC0EB62F0FB53D2919
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/6.ico

SHA256 f23895de9d6bf1166af23e1e199e95a881dda738fea4f8fb09c0491223a95ac6
MD5 eb67ad8d739f22943676914f65aecfe5
SHA1 2f5db1f9723cba64665833f914f94b98fa94dcf7
SHA512 2f6e9cd5920c6e0073274c4ee7d5f2438b5b7dfdff674d73f0c585bb0a9f2509fd2459b9d4b44ed3be1ff4e635fa1f2bf1557436886e86eeaa06d2daa00883ac
SSDEEP 96:FMk3v20vCNdRsfP3TX41xdDvWfGZDEXiBILZuUmfQYkCB5XjE/S:FMk3u0aNYseKE051XjE/S
TLSH
T16E12A599A2106C35F863D87D24AA23377E6C2A826DC6DD40DF9C27411E72BD93C8D778
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/7.ico

SHA256 f37b4f32ef95dcf718c27765db945dab8e6264bfc7e7e7da9d6ba188a35dd5a4
MD5 6cb290f528da55f5459a001b5d3c2201
SHA1 ff88b70046b1275cb45556536f0f21e0573d7d18
SHA512 0125c45e5786971326ba60240a942d8b4c4f762385cb5ca30801c0085f78e91655a63bb769f4bb1ebb9a1e81927533ee03daf8fd79cf8b7c0e1c7ba29db559bc
SSDEEP 24:mKL5555555555555555550+Vm5555555555555555555555rF55555555555555L:ZNej0QLCJjW7335AVDxA3Du2PNyUjF
TLSH
T185912554E5001C1AF4A39E3D79BD22377E3D1E567CC9C8564F0C16092E323AA7EC97A9
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/8.ico

SHA256 6000b4501b4fbd4fb42d092bc2bfe8f7c444e4c306ac9c6cf36923ec45ef29a4
MD5 0444f320023314aa1934494d04af59de
SHA1 881ae739b8e96decece7573147b4f1f5d053f67d
SHA512 bcd9860a36560eaa08ab45d9b827ade0ee70017927a6ae381a2cff33fde18d0db4c128dbc7c695d25b980b5caba7ecb800debb4fec4e2af4b25374be448546a7
TLSH
T18F513455B001184CFA479C3938B855773C3C6B91AD94C9868F8C1206BE76F69ADE2BA8
MD5 SHA1 SHA512 TLSH

.rsrc/1033/ICON/9.ico

SHA256 0534577dd86259bf3d80a7d11c1a3797088976c2696b5dcc751eb3e453d38e14
MD5 71405ae4b95605c9bd776c03b5fd4043
SHA1 bb2981d545159263113c602070877cf4ced17e74
SHA512 542a3514523497a243d4bf31c9bdda46728ad9585825b94090af9558168aecbd4454b5a9b957e9e00a82281462827634bdd2ef13a3987036237b00c12fa10005
TLSH
T1F321AF92F8008865FA875E3D4931661B7E7D0F09ADD9C3E04F0C51460D31B9A9CC9750
MD5 SHA1 SHA512 TLSH

.rsrc/1033/MANIFEST/1

SHA256 fb7414194d1b352675ad29558198470e4abb09321104a4c9289d4265c61e83a2
MD5 801ca73a087b948a8991dc4901c4dac6
SHA1 c7198cc2c47a562ad414c4a567fd18b2598f070b
SHA512 67283567b12380342afeb377a371375527899f6f8b6fb908e850001771b364920b4622f6b9db02ea3570d1a711f854f408cb204654d914f52723fa38d69ff59c
TLSH
T1BA114281D434E576E71202E73FB8F549157AA33B08CC4BEDC4C19B7DB602A8B87221A1
MD5 SHA1 SHA512 TLSH

.rsrc/2052/version.txt

SHA256 0551c3c6e04bb26a1f62e97a06111c0ff6aac350590b1db43941955b6b226255
MD5 2b55da102e7a1b13707429ab1404b1e3
SHA1 3de3ff716e99837ce717f95c0981c0bf0900d4cd
SHA512 caa8b35a29c64e1fd85e8ece8af753ba80d2140c16b0125dec5b85e94775438afe8e889f09f7103e0274a3defa07dbc42959aeb2295fd9cf18dea17ad0b31033
TLSH
T1DA21C30AA6FB2699A0BBB54D9EE68C32435B3911053DA61E98CC7E4E0FD34065911BF3
MD5 SHA1 SHA512 TLSH

.text

SHA256 b4a6ff6f191a159043ffffa183e2fef9d6bb005521c480e9eeff3a396316ff21
MD5 595406ea4e71ef6f8675a1bd30bcc8f9
SHA1 c7a19a07f995a4fda4dc31a45035082a84f5cf28
SHA512 df1e059be9c2f0907626bb3b30043cb71b9aea89e1f3cd9fe8ebe6ce618f588071422182dbd426927c4d0a4e6dc477a6ab85fa64254180c1b548b48971a7d2ab
SSDEEP 768:rf6qfEqLBTxrLkSRoys2uGUmRDcMznWHWmZCXrs0D3:jfHLrLkSRoybCQUZsrs0D
TLSH
T10FC26D11F6A0D473D9E252721A3937BBAFFB463213D16D8383202F583963AD2A60F755
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer