jaffacakes118_82e5320f4cf507302944a68f90374d3356931bdca90a1d2858b3ac58dbebe025[.]bin

resource	yara_rule
static1/unpack001/$PLUGINSDIR/version.dll	acprotect

resource	yara_rule
static1/unpack001/$PLUGINSDIR/version.dll	upx

resource
jaffacakes118_82e5320f4cf507302944a68f90374d3356931bdca90a1d2858b3ac58dbebe025.bin
unpack001/$PLUGINSDIR/ButtonEvent.dll
unpack001/$PLUGINSDIR/CustomBrandingURL.dll
unpack001/$PLUGINSDIR/CustomNSISdl.dll
unpack001/$PLUGINSDIR/CustomnsWeb.dll
unpack001/$PLUGINSDIR/FloatingProgress.dll
unpack001/$PLUGINSDIR/LuaBridge.dll
unpack001/$PLUGINSDIR/LuaSocket/mime/core.dll
unpack001/$PLUGINSDIR/LuaSocket/socket/core.dll
unpack001/$PLUGINSDIR/LuaXml_lib.dll
unpack001/$PLUGINSDIR/NotifyIcon.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UACInfo.dll
unpack001/$PLUGINSDIR/custominetc.dll
unpack001/$PLUGINSDIR/lua51.dll
unpack001/$PLUGINSDIR/luacom.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsis7z.dll
unpack001/$PLUGINSDIR/nsisunz.dll
unpack001/$PLUGINSDIR/un.package.exe
unpack001/$PLUGINSDIR/version.dll
unpack002/out.upx

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

jaffacakes118_82e5320f4cf507302944a68f90374d3356931bdca90a1d2858b3ac58dbebe025.bin

SHA256 82e5320f4cf507302944a68f90374d3356931bdca90a1d2858b3ac58dbebe025
MD5 638f27a08fabe6bd5df94b1a559df321
SHA1 7a41e72f9cfcd29c1e867c1c8daf408293b237cf
SHA512 d8bd5e1850a90f3ffac3d98b277ec87270a035955551e46cc55ea8fc2430d72820be37e4ca75c5e3e13ada670aa3f393c9f869875eb629b528278fe9b0f7f18c
SSDEEP 12288:WxpJ3iv48omB/4MT9faPw3zKIxIHjSJSXg4pRR6875OP9G:ipBivTLw+KIOEF4pRR91wG
TLSH
T19CF402153E0DA0E2E76682395C1B9D67CAD17D796FC022DB32E5B7AF24B26F1423B011
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12860

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

$PLUGINSDIR/AdvancedTests.lua

SHA256 4ac37a1b128e104777961e884b8be3ecad0b26524845355ab37b8c72a96e49a1
MD5 b14158a49f4fa612825491df9021ed0f
SHA1 9a071313167ed314f1cee37902e5f711d6c81fe1
SHA512 86b76ff0df74ff9a715bcff0d03749476778cda20f09e0ab2ad40cb106bf717d2fc06b651c8bc2bdce8d2748a3945aa274e0deced2c5fe1e80fe228fcd02ec40
TLSH
T10C81318791C26E741AB2D298968B0499E26051070E2C421EF69D43C43F7B71CB6EF6FA
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/BrowserControl.lua

SHA256 6d9139f33967cc1869e085ebc0cbea15e8d6b70be6069df3744b8e761c16e27b
MD5 dc5757c4b44b9fd4834fda1fbfeec8da
SHA1 d07c49b39230e6bf4fc856bf2fc73e300163aa71
SHA512 0ebf03f8f3309ff653336df88a31a803df5401f491d9330b85784beea246a69a90bbaf657b7773f05998051a7edf3be001c53dcb5c80a7dce56e8b3f540d5a32
TLSH
T11E6176542C0FF8B84D71A162674FD858F277015F0159924870E216C42DB03DE76EFAED
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/ButtonEvent.dll

IMPHASH 0ece15e7d9bb35972aec701f46192460
SHA256 5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
MD5 fad9d09fc0267e8513b8628e767b2604
SHA1 bea76a7621c07b30ed90bedef4d608a5b9e15300
SHA512 b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
TLSH
T1EF81523B97A026F1C640273B53D71E629B3BD1302316B02D8DD32D0CA93055BEC29743
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5170

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/CustomBrandingURL.dll

IMPHASH 82f18b0f522c05f362fb12db10cdf296
SHA256 2c33db8babc38e9c824d025b594626dfeee67c5319dc93396239899647f87156
MD5 e4c1b74859c17671ffe1c0602fd56b44
SHA1 15ae7d83122a1dc14d79e6c0a2e6565a9ffc12d1
SHA512 9dda77eaa71371d3e1d068d3740435b5aa3f198818e46ae31e19cab8b084bb131e088241abf1a0f7f78179745a1665a9bf500f97ee25cafc7f85c5a1c234a925
SSDEEP 48:SMq1qEwUNRYDeKPTeKp4GN8C8hgIV2f4ag5pmy8WywlhQ7sp9CSC2bH:hq1q/QPKSKp4m80i2QGpvwLXLCtGH
TLSH
T1A7B1FA3A73C645F3D73302326A631967BBB945120352901FD6AB17E9F790D2BC801763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

5236

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/CustomNSISdl.dll

IMPHASH e8a575fc69c67b8f92ba9e9cb62af0bf
SHA256 dcee4695192b17a77ca40f63234298fa02326bde2a2a34bab373ac5cc2fc5f48
MD5 bb81b9946ffc1e50b7a052cd00ac2690
SHA1 0deb5a4c1effa39d22e89199dbb1e6695246848f
SHA512 9c1e9fcac43aa41cf6db56557a7d720db52013b78e048ffa821e608868c2bc97d30aa9087047a5faaaed39655759da0d6fd6097f273c30ce51b0f0963c8a739c
SSDEEP 384:kBrBOvI88qsfnZsFTyQ0mipmycAC/hZAOT8pA40PIL1lBlE:kBrmB8qsfnZeTyQ0mZ7h26g1d
TLSH
T10B13B321D211F03FF4F3297A53EF176AA46852B8270624C734D8EA9ABBD45DBBD31106
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

69997

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Programming\MonotoneHome\WorkingDir\Employers\Franco\TightRope-BundleManager\Custom\Customnsisdl\Debug\CustomNSISdl.pdb

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/CustomnsWeb.dll

IMPHASH 199dbccca3cc8b8a2cf04186d02f4abf
SHA256 39fefafc4ede6838061b804a44b0416ed4929c3c3ff9e64b1e0956186734094f
MD5 f705fa42cb1edf73153cfe6bef657387
SHA1 24462c7b144ecb7778ca7a93b9e1dd62464ea81a
SHA512 d993d37b53b60a009021154e5032965c29789fbb8d7b0907dc0877f36abe5d7456a33a8e3111158ee82fd306d24d3aeabe81be776ca5d2f09b8413ff437aa936
SSDEEP 384:Rl9jSW3OJO9zbkU3UjVzU2QSvA5q/8Bigip:RHjxOJO95mVzjQCAU/S
TLSH
T10913D99CAC06862AF8B2417E46B8D527726EDD14B314BEF7205C1D126DAF1F329B1CD2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

70127

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Programming\MonotoneHome\BM-Experimental\Employers\Franco\TightRope-BundleManager\Custom\Nsweb\Debug\nsWeb.pdb

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/Events.lua

SHA256 895e6439e002183542b13720976a8e8166718560149f876141bd1827e4238642
MD5 5a7269de2a693363b32d3f9e008c53b6
SHA1 7c4a71a0671933f815046672277dc0e9443503e4
SHA512 306db56fac8c717f8c42056d56d10465f2c2be803135e46549b46747ae34635e027782950e13bd4b511b02254f517a041a4a7d80afc0f9bf49b8e9aba157bb9b
TLSH
T15411C08D3144EBA551A65B698F3F3806C23440D356BC1B9978D89F411F7227C80EBFA9
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/FloatingProgress.dll

IMPHASH 080c95f95101856d9bc0de7188993cd5
SHA256 aacd01fddcfd56fbeadcdd83e733778ca45ce38ad8145196f0ac2b4415018762
MD5 5f11bfefee27008b9ac247aa401605d5
SHA1 a7faf8701a2e9675df065eaf2ffdf8acbaf4c0f0
SHA512 574c2fc99f342e1bb5e98bda016e63294494eb7bf1e6b080ae7683b0ca359c5a2fe4df222e55cb5343b71134b16c2b5f807ac703e8ec547a99bd74392f880c2c
SSDEEP 192:+dEyZh2Poi73yFDoUjSFWbY3Lf+25meJVOuN+Sx10mvmWc4b6TY:+z72l7Ifc7fV8C+I2mw4b6T
TLSH
T1D3C228BB3AE294A2DE5907709FAB87BE0B38BD2D3215000B4752F68F557254BD8316C6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

5381

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/GuiInit.lua

SHA256 1b25175e349adfc1c48c4522b42a497d55dd97a0c96e44512f130dc70ab18d9e
MD5 fcf076a0f6941db8497fc1488edaa3c6
SHA1 4b93a6ed8970a205d322bb19f36a6c7293597e8c
SHA512 9f95fa060f32b12036e78603cc0f2c9d5ab67ab1580d68efd94766f45f8ac22e4cf71fbbcd22797c62ed8c6e3946cf5ffa6bc72adacf2443f612314d3dba2f05
SSDEEP 768:dyEpUxaHpHIqRSZLguu2IsIsEqPi/bmT/MHkkR/v63b+9+LshrrcLSop4WXT6ERP:xzRCgu4BR5mTD3b+prEBp4w6EiM
TLSH
T17C73C65B72816B702EF2C2BA5DCF1046EB24442307659265B5DC43D43FB116CA2FABFA
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/IntegratedOffer-Truste.html.pack

SHA256 5f9b13fc7995b1e0863eccd4327e0386fe6983d7766d6e31b4aa7ce49803d4cb
MD5 f06b1ea7745b470d417d8ffbd7f2d02f
SHA1 ce02bed71d8e0531edac4d30f8879f9844718425
SHA512 9ec335b92a0dad7a0f0ac89d026f3e1ca60edc28f57d423ffbbfdd869dbd6f2b120da61935720f4b1660ce07e437f8212c33ad8478f15d5679ba8513296705ff
SSDEEP 192:C4/inglJ2OwByOBxvto+aRsdlKMKvC1KD9Cez4YUI8tC+mnMM3tx:Coig62OPvto+aNvZhl+7M3tx
TLSH
T14D12FC47645C5A86F029FC7A6233A48B94F289C0C89E8A0D9ECD7317D44EC5A0BDFBD4
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/IntegratedOffer.lua

SHA256 35352ad75d6505aa692fc40993a5db1577496a3764f7f6f4af0bd6d45207e659
MD5 5338523422fcde37b92998daeab2c15b
SHA1 2784efb6b1ca0f4defcb9ca06acc45d0f9f30239
SHA512 7f400423e190fcc746663dccd295187a73394e856c95b8f9677a658ec3ea25a24649e5ecbad87a32b29d58005a7e752e9b189a0eb9a1dbf7129f499f0944c24a
SSDEEP 192:zUqFEwEmEZXEySHXR3AxaIEOaIvONqLpbme+LWxCg/KjwySgOgDIBFVf:3SxlnwLEKjwySQ8F
TLSH
T1C542D6663506A970AD73EA657B4BE901F8A221532269861075CF8AD02FF015D83FF7FC
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/LuaBridge.dll

IMPHASH 4682694a7b56ff53baef1a0f1a91f5b0
SHA256 fdd2fc2037d16b90e379fbc973335bbd490e6992c5e58a11aefb0e6978178832
MD5 d47ebbfde3308ad37511d7aae9b942aa
SHA1 e5b2f5e4e0d7d9bdc7c4444d06b3ccc29aeb9404
SHA512 a9263330053f09c1bb39036d8f0b6c41f89621d14273021841440e085f41e15041606a24ca8b0ee6e80c3b94170b24f6ea981f246c576a881df22c4b971ef781
SSDEEP 192:NDV16s16zCc0DFJLfKpCAhC4t9gyfVwxlXMmt9zdBOQt31g/n:P1D6+c0DTL27Ufjl8mdBX16
TLSH
T13442D706A66104B2DE9541B170777F124EFE790122C2285A9F1F7A453D16B92EF3B34F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

9132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Programming\GitHome\master\Employers\Franco\TightRope-BundleManager\Custom\LuaBridge\Release\LuaBridge.pdb

$PLUGINSDIR/LuaSocket/lua/ltn12.lua

SHA256 b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29
MD5 e440044afe6c761507a996b5b45ab0f9
SHA1 ef772c758fd5d6098b41375f35ac26f3963cc306
SHA512 8a82df90459929de1c91ed29a122a149749d42adbb85faf0c3123d0f0886babc90cb93de85105feb7497b46552a6747ae05b985f5a488d1d8f1a2a7db44077b4
SSDEEP 192:PYfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUMwsr:PN6kObkyar5libMv+sCorbrMwsDiDK
TLSH
T1B002BB8A3D86F1B569F2DA99984B6401F1668853827A0164FC1C94D43F3026DF3FEFB8
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/mime.lua

SHA256 e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a
MD5 4bfdaaab9014fe129bc6388fd5687c8f
SHA1 2c6ff28245e1dc7ec9ac1c43c3cda354d07b2c4a
SHA512 3a1a4d838bb5cafe71da262ee7bd6dccbd30dd4d7abe0d04f6ecf96bf704d5e111967be812894a47f2eb3374ee110620b7cc47eebac8b72ddcf7f506ba82a607
TLSH
T1CB51E260BDC3B4E1E4E3E856D19F5814F0692817103512A1BC4D16971B7357AE2FF6F8
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket.lua

SHA256 15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d
MD5 74dbe1060e91112e1c21ef9870b4a587
SHA1 86afb6aecb0a8387ffa5dead1cc9808332f94310
SHA512 73218ebb2ad27d3402173054be997089549698d9112acb4b1c9fe044689a40ceda3df00304d336d2034e61c04832f52d971509240414838841d40f53fc0c3723
SSDEEP 96:LGvAOKAXAHPAF8AHnAHqUNaewVMw7MlvMncAlMNAA/:GWaoP3onoqBJVv7Yv7Qz0
TLSH
T1D781668DBDA3F265BAF3E694998B2005F176845312781106F85C80A17F7251DE3FEBA8
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket/ftp.lua

SHA256 26167d7c0f511cca7691ca5ad6ebf85b4427b94ef12e110ba1da75f023db8acd
MD5 4f83a72dc82a78cad6eb7edbe7d2f152
SHA1 486dd564c3b2ac467e3eabfad806308f14fabb5f
SHA512 a5ca1c8955a450a727950d91b720895db55f425f2531bc2d2d17034363961ed52b6cc086289f966ac3c27b056452ab5126ec7d9bb34cf5a92fdf0f725f40781d
SSDEEP 192:GsooRaLonJfMxBs6gZO2zMAcTcGZqx6iOaBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7iOaBRkfYtppO
TLSH
T16A12ED4AAC87C69165B3C562944B6803F31F5113966C160739BC87E2BF3092E36FEEA4
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket/http.lua

SHA256 d10fbef2fe8aa983fc6950772c6bec4dc4f909f24ab64732c14b3e5f3318700c
MD5 7bd12178adca19b584ed1320fdae1e81
SHA1 839753d73984bda68047585bbc36f9344f51c34d
SHA512 634428c0e7dc62e7c44f60586c0ab0cedb8b55d9e7f2432f7f681aa58e0a8a444168d104d25c51b7839c06817f83f52a7baa4a0e45df6db283d6d5aa0d5e424e
SSDEEP 384:x7/thyc+f7zLajrZhVoaOt2yyViz/vcvwkD:F/thyc+f7zyoaOt2yqiz/avD
TLSH
T194421147BD83B060F9F2C255E9871A06F26A902354291095F8BC42DE3F711ACD3FDBA8
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket/smtp.lua

SHA256 04a2bcc6eb8be03803f7ea4c9aa32e6f70f97fdb6b3bc5ecc5e990cc9932ac90
MD5 29a883b6fb47f87609d0a5b1973aa45b
SHA1 6a36815a72d6d7e6c9ac987461e195d17ff979db
SHA512 c5c648445ea950d58affbacc8b299f26e80b55c4027195cdc055e7d2ee7e3593a59cb36fba8b8dbb8861603d5a03d9867065052b6a3bfd18590a8bd9dd96aac5
SSDEEP 192:hsbQbmId+aSnZwS/UjGf1MT+IsZDOD4GuuJQwDTaBrW:MH8jk1MTrsZDODhuuJIi
TLSH
T1FD02014E9C82B16414B3C5A6D44B3847E21B5103492D1156B1BC86E7EFB05ADF2EFEBC
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket/tp.lua

SHA256 343afa62f69c7c140fbbf02b4ba2f7b2f711b6201bb6671c67a3744394084269
MD5 2cad406e591cade482c7f16f39c21481
SHA1 84a3ab88ff7a9102c2c6d21bdb6eede6862167a4
SHA512 ecc98991c25036b54f2bb71b3229e4bc8fb401e55db0e5f9c958c2a7b00b40fc9ae2d7e45002d4f2a03cec85535785c42ab6d20476fe095a76444d143493b145
TLSH
T1A271CB867C43F6A4A9F2C665A55B950AF1BD4513012C0085BC8CC1F6BF312ACA3FE7B8
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket/url.lua

SHA256 269526c11dbb25b1b4b13eec4e7577e15de33ca18afa70a2be5f373b771bd1ab
MD5 8fb662c362da002b833793ea7794fdaf
SHA1 7afaf1ad22c95690cbb3f55226b617121efc20eb
SHA512 b0b766ac2b5cff879009ad9f74295f7ab0bf8b0628b8aece5597243e0fa96f4a85361728fd8a08eea7d2629dfc5e5d8b6aebca432075ad74c131ad3161a475c7
SSDEEP 192:zF/d/WjwnQdkUDv7wIECAAA4HaHjCRBxj6AqyQUh/T1htnSDiKbn:zfWjwXUDv7uCAx4HaD+Bxj6AqK/TTsiY
TLSH
T14422FE2C3D82E222EAF1E7538EBF0985F118916311691528B5CC14D53F3692CB6FFA75
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/LuaSocket/mime/core.dll

IMPHASH fe8e49b45d854066bc51a41f61066908
SHA256 a1ffee9687ab4a23a78b3251888aff09e2896d76f8d16d713367b265f125188d
MD5 4a4845ba1666907f708c9c10a31ec227
SHA1 1ebf626adc84147e5114885ce779f92d6eb68f3a
SHA512 d009f5e2a2ecfbec5e5e788ade142d612846d0c99921774e4a11b060998dfb0680cf1e1a54604535d5560738093f9ae166866cb23eee5c7d9c4e5cc5a33e7464
SSDEEP 768:Hk1jtHTV0IuugoXCodH5LjciB9snJ1hTgZNno42L:HkhtHTeroXR3aL0toV
TLSH
T112339F22789340B3C6E8827851B45F2F99BEB5110BD158D38FB8754E7F219E2E13B70A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8072

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/LuaSocket/socket/core.dll

IMPHASH f7bb4b78321004f93f7e54fe50af1981
SHA256 bfe8445c38ee71240e856f85d79e94123d7179bf43688de0e2a14e32e6ef21b0
MD5 4bf7db111acfa7c28ad36606107b3322
SHA1 6f20b9f6663ce0c309a2ce60e718d64ffb6c75b3
SHA512 0a5e66a65b80e15d8198f2934c58227ae17680f0fbea9865b2f44af82a29c53d4f95cf9616b4dfd75202420eb73b7d962cf2c84fdad6ce26afe1eb4bb978d0b6
SSDEEP 768:4pOz0XSP1hSt5+5lKfZyDy3TygCk749NRAa1YwqJlfp8iB9jDEu/s5RPOothtlRp:wOws14t5CeTygmNRA0IVh05IoN3
TLSH
T151839D3631A145B7E5E6447131690B37EB7D79301AE188D38FA449CA6D309F2EA3738B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

18344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

Sleep GetSystemTimeAsFileTime CloseHandle FlushFileBuffers ReadFile RtlUnwind SetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA LoadLibraryA HeapReAlloc VirtualAlloc GetOEMCP GetACP GetCPInfo InitializeCriticalSection MultiByteToWideChar HeapAlloc LeaveCriticalSection EnterCriticalSection SetFilePointer InterlockedIncrement InterlockedDecrement WriteFile HeapFree VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA DeleteCriticalSection GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetLastError TlsGetValue SetLastError TlsFree TlsAlloc TlsSetValue GetCurrentThreadId GetCurrentProcess TerminateProcess ExitProcess GetModuleHandleA GetProcAddress GetVersion GetCommandLineA

lua51

lua_pushlstring lua_newuserdata lua_call luaL_checknumber luaL_checkinteger luaL_openlib lua_settable lua_insert lua_pcall luaL_optlstring luaL_buffinit luaL_addlstring luaL_pushresult lua_pushvalue lua_replace lua_gettop luaL_checklstring lua_pushnil luaL_optnumber lua_isnumber lua_tonumber lua_pushnumber luaL_checkudata lua_rawget lua_setmetatable luaL_argerror lua_typename luaL_typerror lua_toboolean lua_getfield lua_pushboolean lua_getmetatable lua_gettable lua_type lua_isstring lua_error lua_touserdata lua_tolstring lua_pushfstring luaL_newmetatable lua_pushstring lua_createtable lua_rawset lua_pushcclosure lua_settop luaL_prepbuffer

ws2_32

getpeername ntohs htons htonl setsockopt gethostname inet_ntoa gethostbyname gethostbyaddr ioctlsocket recvfrom recv sendto send accept listen bind connect getsockopt socket shutdown closesocket select WSAGetLastError __WSAFDIsSet WSAStartup WSACleanup getsockname

$PLUGINSDIR/LuaXml.lua

SHA256 6345b8a47f378416cbd31e543410fa5b03c914219ded2a51c2d3c858f281d6cd
MD5 a34eed4e795d1a7f8f26af91994b2785
SHA1 d950dbd4147b86e246fc19afbc12592aa0ee55b6
SHA512 0d3d92c6b5053469a2edfff0050672ff847135e5d1d08fb7b353df9690f8edcc32f443733bd0d70061f572e3f220769a64a0820918e4b51cf99d8bed30b4f3e1
TLSH
T17181CB55268572B6BFF1E731A80F9812D1774827161601B17A9CC0F23F64548A1FBFBE
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/LuaXml_lib.dll

IMPHASH 0e4b7cfc82eb1d2e2840274f1659b95a
SHA256 90f1bb98e034fcf7bfddb8cb0a85b27a9c9ddb01b926b4e139e1e8fc53d41d09
MD5 7292b642bd958aeb7fd7cfd19e45b068
SHA1 19a800620d041634abae5b5d096cb0e87ce4c188
SHA512 bd758e0833454e0aa2af976ac94fde17c5401102c5991887cefbe8e337974381584c73e2d1e50e49263c55c3788e24dc7f8bd0b9d2a76a6cbe38e48dd9d6c44a
SSDEEP 192:YK/pDHjlL5Fv4k0CSigGpV8pVqVyoyhXnX1:N/L5FqCjpV8pVswXnX
TLSH
T19332D78B763238A6D81D253A218D5B70C73D701618DBD06ACF65CC599C3A1B8FE6D14F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

84B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

440B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/NotifyIcon.dll

IMPHASH e043e246d8abcbb9de2ad82c6e18cd88
SHA256 d2b04b5b33877521f6f140148521f219e25d2de753ff20954f90dcee55d1a647
MD5 9ab83d7ef9bd55db63ceb33840431cd5
SHA1 548c54c8b9d683f32b2f1bd8b3f374fc14691fd4
SHA512 5fbceba72421834d5b888818b1fea5f88c518ad871539a3ff1422d4a3e3d6bb945dca1da0839158c446e54cdc5c916e1ca17283b44135d2078bb1188ae142545
SSDEEP 48:aFV2n5RPl5A9+DyhKqfCdGMfMGMoTtmZE+dlpn6sT6lQQAsjRz:s05RP72BCdjUGM4R+dHn6tV
TLSH
T167B16033B2D595B3E36E063AA0D3295BA0758320A3D1045B8E631FD2B691E37DD64F12
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5940

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 4ec328f99bdd944fc98d8a5cf11f7a62
SHA256 91c47a9a54a3a8c359e89a8b4e133e6b7296586748ed3e8f4fe566abd6c81ddd
MD5 7e3c808299aa2c405dffa864471ddb7f
SHA1 b5de7804dd35ed7afd0c3b59d866f1a0749495e0
SHA512 599f61d5270227a68e5c4b8db41b5aa7bc17a4bbe91dd7336b410516fa6107f4f5bf0bbb3f6cc4b2e15b16bf9495fdc70832bab6262046cb136ad18f0c9b3738
SSDEEP 192:LO6dJA/ruAFEiUdWWE6hsD4YUdJfbub1awgMO:SKAFERdlxhTYUzqZaw
TLSH
T1A7225D6547A041F3DD60823C08A73D275BA97B148EB54ED3CF9314429E2D6A6ACBC336
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10425

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UACInfo.dll

IMPHASH 0603f1e5036bb7e26cc82e7875b30a9b
SHA256 6d29dfd24695535b5973d8261d93373603ceaae03ab97662fe1b3dcc47d18226
MD5 d02a497be5f89c44827f142c4662f591
SHA1 38f83ccbac11de069df0e1cd79a6fdf7f006516c
SHA512 81c87f9d56a8ab7703a4effd3ba7b982b6765ecbdc0dbb1c595f549c4310a5db57dcdc38929eafe56983ea8cefc0b572c3faf82a4b62eb7c564b05550215f1c1
SSDEEP 48:qE1WcHwCp1FOE93DJ+X/WZnrAop1lMlUXLd+QLCSCs:ZhZzWop3VoQLCt
TLSH
T17791877B83D445F3E04A037711F704E976B8D22117B701AFEA8F01662B69D97EC6B262
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

4655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Programming\GitHome\master\Employers\Franco\TightRope-BundleManager\Custom\UacInfo\Release\UACInfo.pdb

$PLUGINSDIR/__localxml.xml

SHA256 aa5074fa1b6c6b46d9910454a440e84e449edf23ceae422f438d44fc50206464
MD5 97094f0226830c9c6882715c2e683195
SHA1 bd9902616ffb60d48a97ff0d64d6440c93e74aa8
SHA512 562b157a909834952b0a685928e00f03115c4e6d0922c459a8a41ec62b3024b67d6e6050b84b4ed40352f06a4296875b4f0b28c66f474558ebaf15d094b38f28
TLSH
T1494144CCFDC07178A0B1517EB9575AD5E4D3EAE2594E8FB8B9920B0F21C60482313325
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/custominetc.dll

IMPHASH cb0a607a2c9593bb9c969e6ca75c2b88
SHA256 3c0d6c3ee0784b2f10093a927335382f67050156136991f0ae05fa4484bab8f4
MD5 81e20eb6c3a6002a805265ca751c7217
SHA1 db0e645b6d22b77b4117fb5612a0bf83c613c199
SHA512 ae6b594bd6cb42913484b5c5282757a9e8f52e76647bf3ef49555c2080540be683079f7994050a7baa45f7a2f57441fcd23353f351476f2891912ec5d2bfc2cf
SSDEEP 384:96WBKKhxKPJeXt0OxyfWB9VTZVWav3ARHKpK/V3STMvDya4m0Ac9khYLMkIX0+Gg:99nKPZfUZVzv3ARHKwhSYvWa4uL
TLSH
T159A21A019E9615B3D7F51C36746D37138AAEAE71246154836BF71FCE2C2A243FA34B42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14715

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

strtol _onexit __dllonexit _adjust_fdiv malloc _initterm free atoi _mbsrchr strtoul memset _mbsstr _mbschr strlen

kernel32

DeleteFileA CreateThread WaitForSingleObject TerminateThread GetModuleHandleA MulDiv lstrcpyA GlobalAlloc LoadLibraryA GetProcAddress lstrcmpiA CreateFileA lstrlenA WriteFile ReadFile lstrcmpA lstrcpynA GetLastError GetFileSize GlobalFree CloseHandle SleepEx SetFilePointer GetTickCount lstrcatA

user32

MessageBoxA GetParent ShowWindow SetWindowLongA GetWindowLongA IsWindow SendDlgItemMessageA GetDlgItem PostMessageA GetWindowTextA SendMessageA SetDlgItemTextA SetWindowPos SystemParametersInfoA GetClientRect GetWindowRect SetTimer LoadIconA UpdateWindow DestroyWindow KillTimer RedrawWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA IsWindowVisible EnableWindow CreateDialogParamA FindWindowExA wsprintfA SetWindowTextA

wininet

HttpSendRequestA HttpSendRequestExA HttpQueryInfoA FtpCreateDirectoryA FtpOpenFileA InternetGetLastResponseInfoA InternetSetFilePointer InternetSetOptionA InternetQueryOptionA InternetCloseHandle InternetErrorDlg HttpOpenRequestA HttpAddRequestHeadersA HttpEndRequestA InternetConnectA InternetCrackUrlA InternetOpenA InternetOpenUrlA InternetReadFile InternetWriteFile

comctl32

ord17

$PLUGINSDIR/definitions.lua

SHA256 e2d0e6bcd2d6cb69a6d9e84d80f9cb182fb0b6db5592d8b304ad6eb98590c35c
MD5 840fd3d93db939b1e4b504d8fe587ed1
SHA1 98f0dd4aca7765c158bcd1fe1d11bbee5e1e586e
SHA512 570ae6db31df726b8fe9aff35e553ad669d4c25deabce424b865b96597933225ab644a7e2944b8507e2d5a0b0e04396025ce711cba9beac7bc5844c435ab76a1
SSDEEP 96:dfT/fHcmaXreYxXXxLjKZPghh/pEdnVmPx:dL/fHcdeMhPf0VmZ
TLSH
T1FA91B61711D3B2B8F7124423B25F1AD7DAC0106387B56869B3ED80640F94D6F53F98AE
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/extension.tlb

SHA256 439a861617df97c0c509d12c9e297d8637898ed325b668029d206bc932283bfc
MD5 483994c053219403e88527fe0fe582c9
SHA1 77296a61059405d7f53bd8c663973d0816f38a5d
SHA512 84a70409a86326fc05dc9d26e5d1f02ab345cf4f0525f09bdb5fbd8ae7d5f03360f1201e50e335dcfbf8e03ac082ec882e340c275a59e40737fcca4fa92d58d4
TLSH
T1AB315593F384C6A2C45D46314C8BD2E857F0BC158E12AE873699BB6E0D307CC6B194B4
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/json.lua

SHA256 2f2f0f1ee1a5aa077baa531b6ca78a8292ac9b13cc00b9b74eb78b046b16a9c2
MD5 40e6400711737821d2f1e8adc950741b
SHA1 fa88a96c6e43c7eda904a1832f36ce422067202b
SHA512 7dee28dfcf7ef028b061259e2608692bf0bbc87f8bff349da42a57e55ff04b1927cd201c850c2bfd41f94089e7b8d96a607277be6769e487ed2eec069aba4b37
SSDEEP 384:KLCjxQC4dhpVTijbgrgCqtSjgykxPEvyf9jYU51BAKfac6Lc6sdXB:sCePdhrTij3CqtSjzkhRYU51BAKfac68
TLSH
T1D2828261FD8FB2611CA2D262D57B4251D51CE020123821D5F8CEE1F2AB51B7CA1FFAB9
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/lua51.dll

IMPHASH 0b930a47b5846bb154dc0be3d35f00ab
SHA256 2a4f510a75453fb49ceb2823756bdbcbfe1a026dcd27a76260229386776ddaad
MD5 bbc9ac3211f07e45510861ae429996c3
SHA1 0a0d7ea99c959cd4add3deb05e500af5fdf98510
SHA512 f3a4a726ffd7869d277e9ee09a833cc27e10f117c52dd2a2efcc96cf9280730f10dcb704ea78a6d6f16ac2d2db1b94ad6025dfabaf83fdaaca4f5fbb0db1e756
SSDEEP 3072:+RyHKGrwG4F9FBtzYyEqRi/0L/AZ4g3qq:+RGXrHOHAYi/7L3q
TLSH
T1A3C35C47F682C0B1F48125FA18A263B7CE3D5BF790B3D7179B91D861C866221F51A3CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

94577

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

luaL_addlstring luaL_addstring luaL_addvalue luaL_argerror luaL_buffinit luaL_callmeta luaL_checkany luaL_checkinteger luaL_checklstring luaL_checknumber luaL_checkoption luaL_checkstack luaL_checktype luaL_checkudata luaL_error luaL_findtable luaL_getmetafield luaL_gsub luaL_loadbuffer luaL_loadfile luaL_loadstring luaL_newmetatable luaL_newstate luaL_openlib luaL_openlibs luaL_optinteger luaL_optlstring luaL_optnumber luaL_prepbuffer luaL_pushresult luaL_ref luaL_register luaL_typerror luaL_unref luaL_where lua_atpanic lua_call lua_checkstack lua_close lua_concat lua_cpcall lua_createtable lua_dump lua_equal lua_error lua_gc lua_getallocf lua_getfenv lua_getfield lua_gethook lua_gethookcount lua_gethookmask lua_getinfo lua_getlocal lua_getmetatable lua_getstack lua_gettable lua_gettop lua_getupvalue lua_insert lua_iscfunction lua_isnumber lua_isstring lua_isuserdata lua_lessthan lua_load lua_newstate lua_newthread lua_newuserdata lua_next lua_objlen lua_pcall lua_pushboolean lua_pushcclosure lua_pushfstring lua_pushinteger lua_pushlightuserdata lua_pushlstring lua_pushnil lua_pushnumber lua_pushstring lua_pushthread lua_pushvalue lua_pushvfstring lua_rawequal lua_rawget lua_rawgeti lua_rawset lua_rawseti lua_remove lua_replace lua_resume lua_setallocf lua_setfenv lua_setfield lua_sethook lua_setlevel lua_setlocal lua_setmetatable lua_settable lua_settop lua_setupvalue lua_status lua_toboolean lua_tocfunction lua_tointeger lua_tolstring lua_tonumber lua_topointer lua_tothread lua_touserdata lua_type lua_typename lua_xmove lua_yield luaopen_base luaopen_debug luaopen_io luaopen_math luaopen_os luaopen_package luaopen_string luaopen_table

$PLUGINSDIR/luacom.dll

IMPHASH 148172081107200e70753e16a32c0c9a
SHA256 9dd5218bc2d12f4d07e268bc6ec01d6eefde4b99a07246d0a96d18477d331b5b
MD5 ed7f7857933b38e5d10daf828e79af19
SHA1 7f1445f87f7e2256efc33ef56da20c3b23a1e0f9
SHA512 ceaf9597d4cb725c4ec8b7af8d1090b38df102b52ca7606a24e9a094fc81f450f93ad22770c905db9115e271fa5fa4f5731caa7b1875e204edb10fb691741715
SSDEEP 6144:sdCVNGq2AcLGcmiuarKjKekqqBVq2Zq++++o++++++qjZfl8++O+yW+s+W+hZa+u:wCVT2nqciarKjKekqqBVq2Zq++++o+++
TLSH
T1D4546E11FA80CE33FAEB01B54676817D2A28EA611740A5C7B7C465698F363E17F3134B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

21536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Programming\OpenSource\luaCom\mak.vs2005\Release\luacom.dll.pdb

shlwapi

SHDeleteKeyA

lua51

luaL_optlstring lua_pushvalue lua_pushstring luaL_argerror lua_pushcclosure lua_settable lua_gettable lua_createtable lua_toboolean lua_settop lua_gettop lua_next lua_tonumber lua_pushnil lua_type lua_pushboolean lua_rawseti lua_isuserdata lua_tointeger lua_rawgeti lua_pushlstring lua_objlen lua_pushnumber lua_pushlightuserdata lua_topointer lua_newuserdata lua_insert lua_setmetatable lua_equal lua_checkstack lua_getmetatable luaL_register lua_close luaL_openlibs luaL_loadfile lua_pcall lua_setfield luaL_newstate lua_touserdata luaL_ref luaL_unref lua_error luaL_loadbuffer lua_getfield luaL_checknumber lua_remove lua_rawget lua_call luaL_checktype lua_rawset luaL_checklstring lua_tolstring

kernel32

GetConsoleOutputCP WriteConsoleA GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA InitializeCriticalSectionAndSpinCount SetFilePointer GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA CloseHandle GetStartupInfoA GetFileType SetHandleCount RtlUnwind HeapSize FlushFileBuffers GetConsoleMode GetConsoleCP RaiseException GetStdHandle WriteFile ExitProcess Sleep WriteConsoleW GetCurrentDirectoryA IsBadWritePtr lstrlenW FatalAppExitA DebugBreak lstrcpyW FormatMessageA WideCharToMultiByte MultiByteToWideChar GetLastError LocalFree ExpandEnvironmentStringsA GetProcAddress LoadLibraryA SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleW IsValidCodePage GetOEMCP GetACP InterlockedDecrement InterlockedIncrement GetCPInfo HeapReAlloc VirtualAlloc DeleteCriticalSection VirtualFree HeapDestroy HeapCreate IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess SetStdHandle CreateFileA ReadFile SetEndOfFile GetProcessHeap WaitForSingleObject GetExitCodeProcess CreateProcessA GetFileAttributesA CompareStringA CompareStringW SetEnvironmentVariableA HeapFree GetModuleFileNameA GetModuleHandleA LeaveCriticalSection EnterCriticalSection GetCommandLineA GetCurrentThreadId HeapAlloc

user32

wsprintfA TranslateMessage WinHelpA GetMessageA RegisterClassA CallWindowProcA MapWindowPoints IsWindowVisible EqualRect GetActiveWindow ShowWindow SetWindowPos DefWindowProcA CreateWindowExA GetWindowLongA MessageBoxA IntersectRect SetWindowRgn GetWindowRect DispatchMessageA GetClientRect SetFocus OffsetRect

gdi32

SetViewportOrgEx SetWindowExtEx DeleteObject CreateRectRgnIndirect SetMapMode SetViewportExtEx SetWindowOrgEx

advapi32

RegQueryValueA RegOpenKeyExA RegCreateKeyExA RegEnumKeyExA RegQueryValueExA RegSetValueExA RegCloseKey

ole32

CoCreateInstance CreateBindCtx MkParseDisplayName CLSIDFromProgID StringFromCLSID CLSIDFromString CoTaskMemFree CoRevokeClassObject CoRegisterClassObject OleInitialize OleUninitialize StringFromIID CoLockObjectExternal CoTaskMemAlloc CreateOleAdviseHolder OleRegGetUserType ProgIDFromCLSID

oleaut32

LoadTypeLibEx SafeArrayAccessData SysAllocStringLen DispGetIDsOfNames SafeArrayPutElement SafeArrayUnaccessData SafeArrayGetElement VariantChangeType SafeArrayGetDim SystemTimeToVariantTime SafeArrayCreate SafeArrayDestroy VariantCopy GetActiveObject UnRegisterTypeLi SysFreeString LoadRegTypeLi SysStringLen VariantClear VariantInit LHashValOfNameSys VariantCopyInd SafeArrayCreateVector VariantTimeToSystemTime

$PLUGINSDIR/nsDialogs.dll

IMPHASH 1e2884056e655f2b7bc5a904e352fc80
SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
MD5 c10e04dd4ad4277d5adc951bb331c777
SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
TLSH
T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z.dll

IMPHASH 4c04c20a976733bf789fead96eb58701
SHA256 cb195d62df55a939e238063c13c792237501f2297386c11229b1558eea9ddfbb
MD5 692479f7c07a64a6a632148e382f0e22
SHA1 cd14982a8e048ae98860db52f042850b63f9f40f
SHA512 7ed81c13ea6d3b5fbed778ff0f2b3361399826296711ec7dc019432ecd79a72e7d6e78d5fab144600ec55b46a56c11ff99f0860855522750883d7693ca885809
SSDEEP 3072:shuC5kBdKlB5Rkg0rQHWjfxTKYaE51GiCySqEMRRQRkM8CQme+5xuPFK:Qq7WHIrLjfxdXREJ/8CgK
TLSH
T17FF3AE2236D0C239D20B2536CE56EB62637DB660CE61D58B3F894F1D9F32581DF29706
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

93148

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetLastError WideCharToMultiByte MultiByteToWideChar LoadLibraryA AreFileApisANSI GetModuleFileNameA SetLastError CreateFileW SetFileTime CloseHandle SetFileAttributesA RemoveDirectoryA MoveFileA SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW GetFullPathNameA lstrlenA GetFullPathNameW FindClose FindFirstFileA FindFirstFileW CreateFileA GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetProcAddress GetCurrentProcess GetSystemInfo GetStdHandle EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects DeleteCriticalSection VirtualFree VirtualAlloc WaitForSingleObject SetEvent InitializeCriticalSection CreateEventA ResetEvent SetFileApisToOEM GetVersionExA GlobalFree lstrcpyA lstrcpynA GlobalAlloc RaiseException LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA GetLocaleInfoA WriteConsoleW HeapAlloc HeapFree GetSystemTimeAsFileTime ExitThread GetCurrentThreadId CreateThread GetCommandLineA HeapReAlloc HeapCreate HeapDestroy GetModuleHandleW Sleep ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement SetHandleCount GetFileType GetStartupInfoA HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle WriteConsoleA GetConsoleOutputCP VirtualQuery

user32

GetDlgItem FindWindowExA SetWindowTextA wsprintfA CharUpperW CharUpperA SendMessageA

oleaut32

VariantCopy VariantClear SysAllocString

$PLUGINSDIR/nsisunz.dll

IMPHASH 0f92772da9c737d2bac38919e9863980
SHA256 6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d
MD5 5f13dbc378792f23e598079fc1e4422b
SHA1 5813c05802f15930aa860b8363af2b58426c8adf
SHA512 9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5
SSDEEP 384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4
TLSH
T188038EA392C146FBC5F8843931DA6E1D6A9EFC301BC16103CB2DBDA52D153967A642CF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

17930

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/res/common.css

SHA256 9a110c6977aea3ddb3fc38e59efbd89f0f13e086ca0bc61f4de86c2015a741bb
MD5 0fed415d7de81f84954bd4e264e61e4c
SHA1 a3d6f75a5ca50b3800593fbcd1d667db31e98698
SHA512 15fcf206ce21cdef8177b6f4e254dca38b39bc3eab0ba43b342f7f7c70529f387ac8d4984f673146cbc5ca73392563c820f98aede01d507a7e3a9241a15088a6
TLSH
T1EC315A22CD05084A70B29B34EB63685DFF17045BE757036A7BF6B968CF3065A4818FC8
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/res/common.js

SHA256 c19775fc4037d815d8321734960fc42426a282ac98bb70aeccf5af8c8522c89f
MD5 de402de93959e2f3f903cd068332f257
SHA1 349277e32a6010bac8110e3914766d45256ab3e6
SHA512 3120516727c81e3f75d208198dede529d4826ba0cd433516ec88ccfb33c70d0417a34a6bf4d39fac869555836bebd876e1720a4fd377d07cebc1600f008fefac
SSDEEP 192:vESx8lJltNI0IeCWTR2tYfl/92/WpOBemqO3a5y8MQybaK4J/4ss6esyt5tYVQzx:vT2J4cVRGW55ApbmAJTQYmU9Io
TLSH
T1C082529CA9412BA8B97226794B5F1054EDA1454B0A10EB04FCDDD7802FFC951C3ABEEF
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/res/jquery.js

SHA256 69a78538c3b8b841bd898d85140986bd87d41f7771c7cb9d45909ce00183783e
MD5 7021191c5dd70e95a9c026be6b9c05d5
SHA1 32cd16fd318795d8aee5dc3bda30afb705a6679d
SHA512 0e6e0e057dc726d9833dad245a5cb17caaf799c0aa8ad1f9b21baedc41dcc126d624b1430e32645ee3f308105836fa7879cc1bb71da3c1813aab40a795785dff
SSDEEP 3072:KgQWO242xfq+50dFhPGXVKDhA4kO9J3A7zUMpZXwFh++l7XKDtxp/Lq8LakxOAd9:HhomMFhPMKDqO9JQ7zPZgFh++Ytxp/LP
TLSH
T18CF394D8334F416F86A2336AA43F615DFA7CD5B2420591BDB5CD986824A081843FAFFD
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/skin/DALogo.jpg

SHA256 d6a2501b3480a0a76baacbf6b7e9c3e1b21842babace99c6acddb545a3586d45
MD5 e88cdb9d5b9717e26a190a8c65f1d5e3
SHA1 a62ec1eb0f5b78493a7a76ede658250b28364614
SHA512 bc31d52afb16488673118d641b465d9262d3672af1355ac4493b0151f3f6cb30eae40fe9bbbf5ff0fcb329c9ecf654d649dbfe44a9567f84f8cd77385bd56170
SSDEEP 96:5rlIZgaZTsF4n5SLtmrnYcKIT0Qv/ubw6YdCdVqf+o6sac5j1hww25QmFwn:JGd9l5MtJIhiwRnf+Tsp0D57Sn
TLSH
T12FB17CD102F900DFF97A7D3C068D49802739B766B7C26ABC89A347C109D48E9F82D2D8
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/skin/DALogo2.gif

SHA256 549a37a696742dd4d0aae0d5495aef9ec77c9cae0de3648f4e77396dc8c03157
MD5 036c827b171e170030f7fb742d38c1e7
SHA1 1a4096e9d3f6fb859040c1038b87c3a57d4c0dcc
SHA512 9e768d22512a9bbe47117d107d6891ac5508e99f57908f59d7787f9c9b64f49952caecc7c5cdaba1929bc94b39b999256d6d38e85b706ac04dc2e21eb985f6ed
TLSH
T1A3716CB9C2B6C24DE7B9D23D0C5A93DC34165356313F0685A876ED8F3A0C0CDE899B90
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/accept.gif

SHA256 e56ecda9ec16a8142e5cbf22c7e9e3e1c686f909b7c5902018d058bfec33936d
MD5 185ff813c6522ae9ac85febccfdd6d81
SHA1 b7aebcff189436037c0a01e4dd80c32f08a66ef3
SHA512 bca327d576fe6e1134b6da7cb9874f09906e03610150c7478583b3dcc5330e817ed77fbd2c507882ce66da14b0e80f0be9e3ca15eba17877215a3b24d5d555ef
TLSH
T1FD715CC4007BCCEBD9224B3CC51D4054FE259DC2E5A6462CCD6E939D26E39AA734A6C3
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/back.gif

SHA256 46d1f5000d596e4f535ec0f68e7f81bfc557ebb397b0df3d69e75a861cb337b1
MD5 d09ec3a084744b8692f59291b98667b6
SHA1 c8a074fbdf30b8c45b17fc2e27840006fe0f1184
SHA512 ce04e211ec71d2f14a67401b27692b110ce3b62d953da1a7f6dc578be0c5ff7232a7de7cba0c488ca4eb65b4f9ebbe5ca60ad2fa147d85d2720c49a6a5221d27
TLSH
T1E5615DDB4197C15BE80BDEF27C7C43127465CCFA09E9A61806B2A22653AFE48522589D
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/back_button.png

SHA256 f883ae60af9a7d2c98b9802549bd05b27e21aa0d3014829e8520f841bd39124e
MD5 9dc457eb5062e884b148839926c00165
SHA1 3ab2cc5da71725112193968352d76fd4c6f0b7ca
SHA512 8020b2bd4d5c6f84e77a34632c1e54bdbd24a18bc5bddde92bd1bedfacd520a026b96f96dd15bfb4bcb4e821729ec51a39c2b9f484929ee6941cb766d1ea9ac0
TLSH
T187413C81BC70C8A117BD85EF864D15B3879BFCDD467FCBB682155140482645140BDD03
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/bg.gif

SHA256 d0f172ee213631fbe5c19326d5667f9c965b91d76c10598ba30a91070023f44c
MD5 f0abc2f362bfbb732acd49ec47fb90ab
SHA1 efa16a84da83e14fbdfb7699f2fde70f06f08bb2
SHA512 3dec6f73d3e05a51e6ec787c28e23ac58295cf8a74ff1177eee76adc7c8dfa50ef9f341ef8e64f67933dd7c5aaddf1436db6e593df8a5f57b2557c25ca347916
SSDEEP 384:K1g8ENvu+JxohRsRAo3dAKtGn0jU3mIWUWE/:K9E1u+sRYAo3rtGLJIW
TLSH
T16142CF8530A798F7D49426FCA9CC82CCB16185257485F637562ABCF6D21E71FE09D901
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/skin/bg2.gif

SHA256 bef45a75d844423b5545b9e29484c85f4f8f00b94e874aaec2681d5a36072779
MD5 a23c3618f610613d57f3159ee50efa12
SHA1 6c3891c1d95c465398ee11efb05835386d998766
SHA512 108ded778cd584fdac7384bde957d3e76c673b59ffe856f93618b7cb52531eb36b4b93e6a2b20ccf1e3f1679ec1d2f8b02069af16756135b9365e9e46dd6548c
SSDEEP 384:Wvl4FOKfeovARAoLdITkTKSPdaaL77Fq4BjfLG:WvloDj8AoLukTfTFy
TLSH
T1B852CFA534D764E7E05866BCB8CC40C471614534B5C5F2336A1EBCFBD35D51BA0AEE12
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/skin/cancel.css

SHA256 d854553c0688e36279818d0d2732ddbe035917fb240b8a887aae3935725a901d
MD5 28b650736721266f3983f0caab126ce4
SHA1 ab6354540eaf882ffc15336b5b897a4cc7857714
SHA512 91d998acb0a72509863aae169373ca5ebc66d43f597a41823bf1e40e9492303c37f4c303d614e048cb35c419feb7c7b1a1bf310332ac00972bd3460c46ad45c5
TLSH
T194F0ACB7D78813FB3F0E0410E2ADA68AA518943D933395F1307D90A41651D71B0FBAC6
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/cancel.gif

SHA256 65b52af53c65de809e00a74a279e2f092169884ac196f91a2636f07eb0d3d816
MD5 03fd5552ccc7cff7ef7e42d6b8852316
SHA1 17007c433b07ce287156fb9e84386c2ff5dbdf34
SHA512 a6e43c8f39f31192c11f0bc88e679b9e3773ecd93e642c8c641bf0f4fa9e4d18dbce4443c8ed2a917732ca411e5ae8624fd4f07d99ca73e82d2ea3e65429713f
TLSH
T1A1718FE0C43C5C18E133C6B46CD5281E7E39D439DA34A2FE57C2D5052B496AD97B0B67
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/cancel_button.png

SHA256 c9f68c484ab2f36280f1b5873cc7d94270fe1b377bcea76c934cf92159b537e7
MD5 fa5edd3277d1a64986cd87f459e4c653
SHA1 2892cccdf40c7d1cb4b7b20b3dad9b5b9211e39d
SHA512 51170abe385014d64f1c0a437e5504aa0d1ba70b80c96c06345b95ba315f9812a39322bef79b2a810ef59a729ee6eb1ab936cb2a5032495d1bae939d2a48fc28
TLSH
T1074129F8A9A0685E41E95571ECB7CB92D85B0A1F98DE323E4F3B30819B395FC04197C0
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/close.gif

SHA256 cc50699f372f99feeccedaa304f2103fcc38ff3978d6dffa2ca3f68c9be951f9
MD5 8c8d77294718dcd86f2f89c77d5e8574
SHA1 8a608be77c090b4bcd28dd89727ba8d5bb2038e8
SHA512 faae62c7f7fb9dd67d20176bc8d6bd1caefd55739f96b0e3909b5dc6bfaa73bab4d7f3f5dea3a904eb4da81fa294266496a6f868dc52a31a81cf72679c87533d
TLSH
T137F0DC071830F166F990517AC8C841A2BB469B716B2EC019EC7A18A9802C58A3B166C4
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/decline.gif

SHA256 0c47fc062958fae099ce543807b4b87953db66abb5d42bf16fdb40a49669f8e7
MD5 09c122cb0e0a9a36f9879df979ad8bbc
SHA1 0c0f7e666bcc0389a65607e2e8f668291722b6cc
SHA512 9134d66ccfa57fe4f2ac1190d1362167047a0887c8d652e169e2d8b5e73c92cc0707aa21cf766bde6a97f0f6853478847a4fbb2d41aa7732bb8d5e59faf38a7f
TLSH
T174717FD11F4FAE19D29A0970BB45750EE52179D3B0C508267C961F0AE03FF971676D0E
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/headerBG.gif

SHA256 06d14477697e3f0a3841cf5018a261fccbc275056ce39949adebe795fb7db143
MD5 d68ceec1f2a0d767354df6f6715f9950
SHA1 ea0920c07a160c5d7d0bc7bedc13bf63b7129d58
SHA512 74f8982ba87b0f68c1be4d1a46a225489a019f2f10cae4d573712b1449902f0ccd2d37041c24cb19c54943cb5722c0f61d111a378286364ff3d12cf3fbfef0b7
TLSH
T1E9E07D0254602B60DA109E3D882F42C454BB79E691E06277C1AD8E9D8A18304470B044
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/mod.css

SHA256 87448dd8407c04cd81520064d4f88d367001dcd4c287b1bfb00b7645fcd6f2c6
MD5 071c5d8a7982cd39c4058cf43929468e
SHA1 9c0ab0ca5c30c95efa30d84d38b97b547a7caadf
SHA512 b7e84715b28caeb845ac3e4963c740ad6e7a442dc29b00ec98c017bc7e3d0be88052e56020cfcb8079b8083ab7040555a9b5e408805a98c7b8f15537b539abc0
TLSH
T13A719C18D611161D3472E724AF93128AFA3240ABD357152C7FDCA390CFBA0198966FEA
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/offers.css

SHA256 2fedc976d2836dfa6b90d4c8ac1a001043bbf9633c565685c89fd11938d76e71
MD5 3d02c9aac4a36034c11988253b2fecd3
SHA1 15876ca86bac5fd4b0040cf66478c2d641b71991
SHA512 5ec9edcd355f398f223c3b68392c732e851f34fae10da993136d4b0fcf56c2b5edec04a9593cb960b37156928664eaaa258ef26c1647931459d9fde3239fc44c
TLSH
T15551CF80E79637BB66670126B37FA584AA1988A4C573EBBCB07D9150C7A147032724DB
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/progress.css

SHA256 fdd42fc22ad4c290956933c26659f52d4cbcaa733b0515aeb353c7e6d58c237c
MD5 9a2ac1affc15e0c63d5095f0bf9cecea
SHA1 4e5a6fd5a394117d8d3fc10188c7704702e1c29b
SHA512 b1f2abcc62a1c191ff60b49c803a598c6d2a730248122065efc54379a06dbd4ee44d37a5374c2a487ebf08b67fb7518b80dbf28fd16537e66e8cbc73614e868c
TLSH
T105410F56CBD413FB7D471A21E3EC8A812A1C4069C227D7F8AC7FA124C302E6099B76C7
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/stepBG.gif

SHA256 01e114cd589682e892ea910b587ea204ebd12a1914e06d2fff4733dd0e391b0c
MD5 83e255bacdd314f115ecd22c48369c95
SHA1 ef549c7294dfce63bfce0bc45fcd1a97b8994225
SHA512 1bd0ef0bcbb9861ebd9f74924a828ca6506b95664fa6538b56195cccc4a89c3a3a34daf3883a13c2ec658902cb356c34f9d89fa3f2f945bf3661903b14f33291
TLSH
T1A811815CA0728CB8F7A98875839289AB042A78167A801E473429303180A972608A83BB
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/step_off.gif

SHA256 562fbbfe8521155834452cf1b3310ea9585d5fd2220352b01f9c4cce3d265b63
MD5 8caa54bf3ae198909c0e5e908710ead7
SHA1 e5102ab0730ec3a9f0e7a2ab2c24911c14362795
SHA512 b7079c093aca7ea40441ba471acf683a87743de1d204b261681dba2d073e18f73b893b6640c38666d35e7e4188e8d1dc5fe11892be4e4e8682b9fdc68b642643
TLSH
T140C02B4C1ECAD806BC1488703DD906C4A6264A41E2220409838D13F3D297E04CCEE831
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/step_on.gif

SHA256 4032484de6a94d8ebc6db756b3c2d19a66c8fd3c7e8fb92f6294c58e2e03c00e
MD5 8d0f03e631148c73fdde9867a02ab990
SHA1 f2c342b84e95ce18c4c01c1c7a7573bcd6466a20
SHA512 b4ed003b1f7241c51959928cf33a7e64c0e295e11edcb1ea0b24c759a9470fd867fb4e13c08c0e63c3a6d78f41877de983c511f1afe8808edda9ddd321bb1754
TLSH
T142C02B84CEC074A2C4802D31076D1084B90D58425734088B485752D8240D14F0F19F20
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/truste.gif

SHA256 cbe77187f019cf5164d0ea469a64f16cdabdad604dd88323ed025ec2fadaa458
MD5 723efa186a033a6de5c063a222cabe11
SHA1 64e2b5aa5ec232d35cf06a61587f438eaa7e402c
SHA512 4048d5d89b91e355dc1335de65f02d4d6164389829448789c2db011e0863bec65bb12a8e78a3cd669cd7e7be17066e926b43f7e35af21fc4c81007cc67c8acda
TLSH
T178414C5651992F5208C4CFE6F1504E34742CBBA27DB43E1017EE653979CE1C9B1D6E44
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/vlcmediaplayer-128x128.png

SHA256 567751ed24fddd40ef241de1ec51c285d707a8f49f157a0f8f42c6db08e3c891
MD5 fae1089d09dc4643b336332e0a81489a
SHA1 45b2ffa31ad966aa1337d8d675ee7888f6d28b8e
SHA512 362bc745a415cc7fe4cc5df675e2ba744badd5e3ab401d91234f0cb62c2d1210f9735255deff498c4316d2111cff18856511ca3da2977e639cdc846986c0fa91
SSDEEP 192:5UoaniATpiY2yv8/H1NvcpnuygnIJuH2qjRpSUsx/JivrCds3:moanzTpi5ruw9H2qjDSbArCK3
TLSH
T13132C098BE2A594D736EFCE2CF9370674FFE71300B5282D80185982ED07606685702DB
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/skin/winclose_button.png

SHA256 2cfcef01b952aefd15b335d3ab666aefe7767ae0c38703aba0a20b8434dee5aa
MD5 769d48272aa52d14f420532d62155e2a
SHA1 0ffb90f7ce0263f07279f8c745768f7da6528b4c
SHA512 fc72933268e800f723afa66cc15a93822189c433b014d74e9e2a924bf3a9687bff1cf40278b26f42fa47c17336be7044849c46b6deabb79cee05ee6c13862259
TLSH
T1EB21AAC5D002B91ED6949689219F5934A95ECCC40613CABB18FD5E2A37C5582DF3C3EC
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/skin/winmin_button.png

SHA256 ead08cc8d9499b5d1bea1d96cbeef06c19b905c7f9c4c66900045996dac5cd48
MD5 26f9757a4966fb79d67da03d560c1a05
SHA1 e42bef8cbade36999f212ae1be60cc9d1cfa1491
SHA512 da4d50c44095b8832b3e97c406925c7861283038f128ff639faec16dfe3789ad9bb5f6d0719e6ade213f097797a880dfb5ca48dd659f2e08d5eccd40a27566ad
TLSH
T16B01CADC2550417B5DBF179723450C12A4014FE0466BE1670A139C2FA7F0631F5FC729
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/un.package.exe

IMPHASH 35b698a6fd5038f719a27b089cb1f48e
SHA256 a4da8c6f38d7e573ffbf04e753ea4cb0fa6a174df054aff57edcb73e3e252fce
MD5 5694e7daf20c47c8d5e73d4a838c2ee6
SHA1 43814f29584ff23c2ca6f78aad733dde536afd56
SHA512 ccbb140a677356e1b34e65cb7a25c36145c40db37f538ed821664c676c1378efaf82fdd4b762dd54cb93b00c23e267fc717d8e0730d06924b5226b44cd4c03bc
TLSH
T1C881B4027AE5F43BE19822FF93ABCCD1E7256061235458EF04F3608B0F525E33C29041
MD5 SHA1 SHA512 TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

5472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_ISOLATION IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Z:\Programming\GitHome\master\Employers\Franco\TightRope-BundleManager\Custom\Scramble\Release\Scramble.pdb

$PLUGINSDIR/utils.lua

SHA256 3e5380ce81e93ebac9eff2b3c4e1cad21d2b154808d67b28d2375b29d5fb91f9
MD5 546f0664954e8b82861946103b2a644a
SHA1 2849f88b502a59031991e66ff7462f5da53bdd5c
SHA512 a19a2aa8e46cde14087b036a478ba251bfc007ffaa774c476abbe0f93066cbd34804c062176fde4307fd5b6787d019686b580e09874e1e009a516a3afc9fedfa
SSDEEP 384:uHeaPj8T5B53+NimEQkDvTjh6eLqQxARwLNlRdqNfbl/e4zYPyU:u+ab+5B53+NimEQUTVxFNBqve4zYPyU
TLSH
T17703F380DD475121FD67571294DF0696E2BA3903A13A22F6F8FE44581F2E53830BBDEA
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/version.dll

SHA256 3eba921ef649b71f98d9378dee8105b38d2464c9ccde37a694e4a0cd77d22a75
MD5 ebc5bb904cdac1c67ada3fa733229966
SHA1 3c6abfa0ddef7f3289f38326077a5041389b15d2
SHA512 fa71afcc166093fbd076a84f10d055f5a686618711d053ab60d8bd060e78cb2fdc15fa35f363822c9913413251c718d01ddd6432ab128816d98f9aabf5612c9f
SSDEEP 96:nPtMckE1e91BopVyXwUhn3f1I0vOKeoqO4d8QvS9:n1MMuOUhdI0c04yV9
TLSH
T115C14DD52E7C5673E2F1433742CF8B983632909000B81A5B5779425ABD8A3E1416B77C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

44528

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

out.upx

SHA256 12a0c008b207d7e546e8f7a4030b25a999d745dc15a174b4d305763a4df6ab12
MD5 aa05c546875238a55566cc34e4ab55be
SHA1 8a8e0b2343036a9ed24bb8480edd4c262808e2e4
SHA512 52d1f35ae2e810f6c4ddb1f0b4a0889c658d1bdac33cf69b6700a1d4f94d9b040900b52513fc66916094198f003ef94be299e115346b28778fa545b31a6cdad7
SSDEEP 192:nro24pvm8S8dNr0Q+7y5cdFx8Jf/DHFKSr9C:SPnV1Z55JHDHrk
TLSH
T1F1120A01BD92E872C35588FA8CAFC284317F31026EA565127DDB1BDD4C2EB61F71E406
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

9088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

454B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

376B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_82e5320f4cf507302944a68f90374d3356931bdca90a1d2858b3ac58dbebe025.bin

generic

$PLUGINSDIR/AdvancedTests.lua

$PLUGINSDIR/BrowserControl.lua

$PLUGINSDIR/ButtonEvent.dll

kernel32

user32

generic

$PLUGINSDIR/CustomBrandingURL.dll

kernel32

user32

gdi32

shell32

generic

$PLUGINSDIR/CustomNSISdl.dll

ws2_32

kernel32

user32

advapi32

generic

$PLUGINSDIR/CustomnsWeb.dll

wininet

urlmon

kernel32

user32

ole32

oleaut32

generic

$PLUGINSDIR/Events.lua

$PLUGINSDIR/FloatingProgress.dll

kernel32

user32

shell32

winmm

generic

$PLUGINSDIR/GuiInit.lua

$PLUGINSDIR/IntegratedOffer-Truste.html.pack

$PLUGINSDIR/IntegratedOffer.lua

$PLUGINSDIR/LuaBridge.dll

lua51

advapi32

kernel32

user32

generic

$PLUGINSDIR/LuaSocket/lua/ltn12.lua

$PLUGINSDIR/LuaSocket/lua/mime.lua

$PLUGINSDIR/LuaSocket/lua/socket.lua

$PLUGINSDIR/LuaSocket/lua/socket/ftp.lua

$PLUGINSDIR/LuaSocket/lua/socket/http.lua

$PLUGINSDIR/LuaSocket/lua/socket/smtp.lua

$PLUGINSDIR/LuaSocket/lua/socket/tp.lua

$PLUGINSDIR/LuaSocket/lua/socket/url.lua

$PLUGINSDIR/LuaSocket/mime/core.dll

lua51

kernel32

generic

$PLUGINSDIR/LuaSocket/socket/core.dll

kernel32

lua51

ws2_32

generic

$PLUGINSDIR/LuaXml.lua

$PLUGINSDIR/LuaXml_lib.dll

kernel32

msvcrt

lua51

generic

$PLUGINSDIR/NotifyIcon.dll

shell32

kernel32

user32

generic

$PLUGINSDIR/System.dll

kernel32

user32