Prosheet_2_2_EN_2017-08-18[.]zip

resource
unpack001/prosheet.exe

Prosheet_2_2_EN_2017-08-18.zip

SHA256 44d4442b90ca772f118c858b0bc30742447da580a666c055f53d659b3b162b74
MD5 4cfa6edfa51617408cd8dab44dd3932a
SHA1 0d0de20ea69d1133eb48601fda74d70f1a429c0c
SHA512 77851cbcef5136939ffdaeff0932402c2f5d4d52a6137c4bbc3628f9f59fe4eaeb3be4390b9ae543afb45c2b7983d5692586c42bd15a6700fe56f7ce63959a6c
SSDEEP 12288:dbBaUOzi5yiAAMn6MXkDBxK1gz4x20H2lctQ07/j6OH75wU:IwyifnMDy0WGtD/j17D
TLSH
T1D5A4238E3C1C704EE4463D98FA5B20D4B98DBAE5C2AE679116B1A47E772F0C85881F1D
MD5 SHA1 SHA512 SSDEEP TLSH

Password

fadsfa

Read me.txt

SHA256 8ab98373f9dbf4a277be3c08faa5ad59e300a61b2e72abb7da8a378e59b5eedc
MD5 29cc0085deb508fe598081d0dd449793
SHA1 40c914543a68368e3f545ddcad140fa89b931183
SHA512 cab597474a18ec7cf3df1b584eefae23a00d2cc29703a489304bed9790a7a9707c14d3a539d81058996ee7cefa9c07804186d651372d996d79d348505d31cea1
TLSH
T1D501F10F175663463BA11522F3CFE7C117075C1CB669AB58E2C081A836974FB25BD998
MD5 SHA1 SHA512 TLSH

example.bak

SHA256 b26fdaafab793ea6049a17b0974c09273f9661f70d55a71959e8bd03909c4d9c
MD5 27541d87ac543d7cc8744ca68e056ede
SHA1 e6e265a0a0129ac40fab7f006979794532824dd9
SHA512 1bb1c80e83e68170f9b11a9323cb3d1a4fb57cb40f247e476bdea06eabc5e513ff54729dda9e6554b9b3a3659778ee2ad7ffd680b5100c80ec24a6af081cea35
TLSH
T1F2F0276B836A7DD7E8490E74285B2D203B61C6BD8B34D3534D4362375ADA2A81D38420
MD5 SHA1 SHA512 TLSH

example.spc

SHA256 989cc8801821403f29df5ecfc447a5236fbafc25c67a1275b29fcfe2932c801b
MD5 949018083ec049c6cf27dadc868a39d0
SHA1 2cb8fdbc47fca6739cbadb97a3418a030822abe4
SHA512 4edf57f224d94efd624a66e60e5efbb293202f381aa382bd69bbb061e93e2e3967464a2660c66305202aa0d039fcba8b84f7766262f657f2352314a8c940dd73
TLSH
T13DF0276B836A7DD7E9490E34685B2D213B51C6BD8F34D3534D4362375A9A2A81D38420
MD5 SHA1 SHA512 TLSH

prosheet.exe

SHA256 8806103f37285533aea0adbf7e1ea07db2aa260443b61cc8d75b6a376568f733
MD5 48fef5682bb354bfb2d7547ffab9bd89
SHA1 5a02f825daf7857ffaab74604cca0dbfac78c353
SHA512 50c82484e052d5dd13e3c6a9a98e4a1adaf902fa9aedd9ddddbe9442f0fe37c8d2c9602d2a09b893867513ab7d33400af310fa71898f8ba7942e8a34c35da826
SSDEEP 12288:8iyhnXDrgWBGFT7ZsKSU7s2GPjzvY9yeOu1OPjcQkCStUW0bLpOm:8Xn/gW8s+74j8Mk0jciStUW0
TLSH
T124055C22F7414833D02316388C0B57A99D2DFF102E29A9877BF92D5C9F7A751B926393
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

fadsfa

Minor OS version

0

Major OS version

1

Entry point

680692

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

661KB

Virtual Size

661KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

prosheet.hlp

SHA256 f85e67dc51f425ead623da525697b091c8ffa2df7a95095e0bf2c5f281c02290
MD5 75841c6a20662e920d7de676ef35deda
SHA1 88facab4bbffac1677307d0431438462e2a9e4b4
SHA512 159d29f1b375c6c3148c0efd64c6628addd2d078c5e66c0cbfc8af12f015cfbe1201ada83a4ff74182fecc7c038c49e1b4753bdf1c80474ee70cbddcb20a3db0
SSDEEP 6144:SSohtqNc+8qzZL0Ah3wWO6i1udU1xjazpFFHzQ4:nt
TLSH
T12814AFCFADF87B20C58855B8CE8E7AF620973C5982A39D44304ACDDC1A924ED7F951E1
MD5 SHA1 SHA512 SSDEEP TLSH

sheetpiles.dat

SHA256 6d6b897b439bcf628fb7b1d24e9159d0642e4695061a8af1f486e9a056d9fd76
MD5 cd6001b780bda791539170cb466f2dc2
SHA1 4023478fd78bfdbc222167f255e9c432beb117ef
SHA512 7523f845bdd4f26165df7fad4307a14f77d59068ad6af375a463a8e2ad51c2c299734aab26aa2a93b505778570b5c193b5c478b3cf6bf57c423236aadfc0431d
TLSH
T10D51FA77B2209D3178573B489134235F6C3DDD3AB4878815196413F01FE9ED2520B8B5
MD5 SHA1 SHA512 TLSH

steelgrades.dat

SHA256 3accc8227cec51e6bbb9bd7ada2c35c9ab582a7281d6f65377b8b73302a5d775
MD5 4b04dd84725104851487a44a0c55bb31
SHA1 37fb3945676073166d030a0a20fa8683df969230
SHA512 a83ef203174db35639d77b72196c7cac522fd8f191ce62624eb81a9eb334ff5db4b524bcacbdf9d198bdc486499df4fe3c86a10998acb830069692bf137d25b8
TLSH
T180D0972C5E1E3362A0D810CECCF368BCBE39F5EC08A5C802A1050A04A0AC4638B10AC0
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer