eb15e6c723ec5059690450950a28f29d28491ea3cf8f6c5546f8a1698b31664c

resource
eb15e6c723ec5059690450950a28f29d28491ea3cf8f6c5546f8a1698b31664c

IMPHASH 6ca47992e7d5f2df24953c1557f8d2cd
SHA256 eb15e6c723ec5059690450950a28f29d28491ea3cf8f6c5546f8a1698b31664c
MD5 91fc7869397bb9f79db241f87cde6f3f
SHA1 aa6757a66e868db46d7f11fff3d03275c01a3e03
SHA512 f05b74ff6b7e85992bed73dd2d6ece3d3d873785f2c806b710558a9417deb4b680208c95902b9b1063189a95fd8c264ca45de19559fa0868e1400ea8ef7155d8
SSDEEP 3072:eHHYf5dYuiXJTAdXpwGSaW9PYIyBn7m6S:yodYGdXTS/9wn7m6S
TLSH
T1CFC3CF9237E9847AF6F74AB27D728647A279BA211834C21F77409E8D3D31A05CD31B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15953

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegDeleteKeyW RegCloseKey RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW RegDeleteValueW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegCreateKeyExW

shell32

ShellExecuteExW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHFileOperationW SHGetSpecialFolderLocation

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW RegisterClassW SystemParametersInfoW GetClassInfoW DialogBoxParamW SetWindowPos IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem EndDialog GetSystemMetrics CreatePopupMenu AppendMenuW GetWindowRect TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos ScreenToClient IsDlgButtonChecked GetAsyncKeyState CheckDlgButton CharNextA SetCursor GetWindowLongW GetSysColor CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint wsprintfA PeekMessageW DispatchMessageW wvsprintfW LoadCursorW CharPrevW CreateWindowExW

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW WriteFile CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW lstrcatW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW GetLastError MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject RemoveDirectoryW lstrcpyA MoveFileExW CopyFileW

.data

SHA256 6e6c3e26976516b2d6c23eac52a6a894c3edfaff836d515e22bf566abf77cd37
MD5 7d648ada60e8e3731a3b775f6509863f
SHA1 dfe4cfe2bd69ed760b30e7505b497f9af2a8de46
SHA512 3934f38bba8c3314a42d48ea3c4822ce2fd0f6f8ae93b5c262fc874c5fd66a8c63c2008dff715ce3efd8ed5e86a48657adba14b76d1ab755ad9a691d7db67f57
TLSH
T175F02B8220B0C52EDC1061707FDC835102C09C421C04C0B7BB4F334CE570122E3EC10D
MD5 SHA1 SHA512 TLSH

.rdata

SHA256 5db742ca8c0549c786b6d5c537551b8a192b52730e359aadbc65d0efc8a73a35
MD5 02607da7839ef58ccabe268bcea8364f
SHA1 83ec0f60a0516990a2142848d7e7b80fa999aaf3
SHA512 b2f64113e0adf0e9bed42765c41e7eee84717ee833b9eb783d16fb29eee94a30b64f2242bfa84093b302b2711c143f5a44d8c38d5d0e72bf8682699b7523aa3c
SSDEEP 192:eFj5orPXV9pxrvXEFE8uRqFhtnDLyNxYcoKjK:S5aPF9p1vEFZuitnDLInoKjK
TLSH
T1EA32F88267ED554AF6F75FB27C768845493ABC216C38E11D6100CCCE39B6A4AC978F32
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/DIALOG/105

SHA256 425b8270f7ca42a927eae6bea468acf414a3e4b58b5ba2c56aaae4d1b2c11014
MD5 386770584473e271f23dced36427f4ff
SHA1 d14ce95f784b35e4e3ebee535476ebcd3e380c19
SHA512 e7bd459dc14642e2222477a05694db86e526c90333a6e0e711c91a8d5893036c09a27f75855d2b416f3da4ecb59e7a466d82b7cb7abdd56f6dabb040da34c1f3
TLSH
T168F046585B44C82AE01C4B7883E2C3E77133F01016005A03FF89B3869850E9CFC2DA42
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/106

SHA256 4a55bd714f5d50cd8eabba10e57f0618f1842717dcfa582d73a917b1933cd1d4
MD5 fa83652660409e90e0db9731ad2adb17
SHA1 0a8f0af67723c87fe26ccf676b8e19ec6357b4dc
SHA512 d97885f9c2846a042ec3c0d01a756d22fda7a989d55cd61efbc945abcdcfd74ca0284c745cf8bebf2d2fab82718f7b57ab0b701f67d2319ca6b5f55bce663c07
TLSH
T118D0800987D0C068F4704C34643BC5672914F5420C1471CFBDD583BB0824D00EF76241
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/111

SHA256 587a03198c39f990e77691056bb5705e21374281862ce06de94c68172f50f763
MD5 1db3e4c32b9560257ddf3506fef9dd3f
SHA1 6666e0c8336456cfacec71d84415c6516e9e2673
SHA512 ab76d465e4285a156a877760231a39d168310f48df2bab925b33078938ac43899219a5c9f090f6b3509f4a4b2da60a281209b031e18185171d7b7d5dbeb1a851
TLSH
T1A6D012553AE5C50CE5B52DB1ED71E2E71231F800D530C21F6540120D0192900C925B86
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/205

SHA256 349420ba5b5de0b0081e96a686c826e0f409f2f3413f2e9fb7e6f71cb544c325
MD5 c0c4f9be63c9d286b8d1265977ac9d86
SHA1 f9c0d915ded3ea188f342d0e5341e67701eed813
SHA512 c68d19d71f58221e6ed433d4733b2a8ba4d2411557a824c506de162def8b3a3913d1e2840576d81afe5afc0b1e6767d79b7df51d165d0d7cb87d60841daf1024
TLSH
T114F0B6595B04C826E01D4B7983E2C3D37633B0241A456A53FF8D63969950E9CFC2DA42
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/206

SHA256 1a39a3aabdee2aa68c507c55ff37c38722b05b7f8bde66185a2462792381d8cd
MD5 8c69d2c81dd2d9050d0fa94df90ff16b
SHA1 cd71d904da747d7141e5abdde9363f7e240b26bd
SHA512 c07f491b5728a24aea2669ae0680801a1c3bc89ca9c9272b33609abcaf1f85005346ef3f7f997a314bf465ca0d4d6a05074ee4071324c77472bcbf083d58e77d
TLSH
T10BD08C0D83D0C0B0F0B00C39903AC5832A29B5824C0976CBBCDA83BB0C24E00FD72200
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/211

SHA256 f6d446610083806ccee5a86b83c5206339bebb34cf128100f778ce555f0d1592
MD5 105b6270da58ec2fde8a18c4d38f6e9c
SHA1 2c7f5a125ef4a2da5c10371fca6711f6a50fef5d
SHA512 bb5172288bc850f2a49153a2e70213a28b0c2472e29af8f368d1194cf343a939f8c4952668269fa1cc3f8276ad5fe40e6b8a61e71d04abcd32ee8e5fda456c99
TLSH
T190D0121539D5C508D5F52DB1D561E3D30336F410D530C21B7540120D05925008821B45
MD5 SHA1 SHA512 TLSH

.rsrc/1033/GROUP_ICON/103

SHA256 61bbaa1c6e8c1689b2c7f096eb03902c5a5f0031db20828da8a45ca45ca6dbce
MD5 29134a1bb16b9f08d14c6f977f256368
SHA1 272c4d16d440f2709eb8eab9790bb7b06e6a55bc
SHA512 58aa83209bfce3db64f691b7edd0fe127f892fa9bdd2c1361a30476c708675e4db4c78d0f0ad2908f8f078866bffee3605300c778e6be08e07ed732793dc0f43
MD5 SHA1 SHA512

.rsrc/1033/ICON/1.ico

SHA256 4abeec9d1e76e7ccb5fb3927866258c1509cc781f25515ff30efbb0d7560da37
MD5 3492795e622cfc152c73a6a529e9fe4c
SHA1 4d67d22eb9015a0f04494ef03b998e66c692ce67
SHA512 8530555ef476395c6e545a4711d34e014fc13e4d33d67dee1e00e75d52ad9b22a0ab3c9d9b3eb8540e64289e288de177e1ebcdda3adab593549b4e9857094a75
SSDEEP 192:ldB1u/mCDPYIW+3A3NDJWzBYcaGcrBOi1nq/r/j+:lds7YIbSJApc8i1szj+
TLSH
T15712D7D374D6A258D16BD832B4A30A87390E2D59161181763FE939D61E333B4CEB3B32
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/ICON/2

SHA256 ee0352f75df1009fa6f5eaf323a1ed55c127cc679ac6b9de70b1b3f8dc9ece76
MD5 0d3a12fd3f68decc694da04b57e61d8c
SHA1 f73d4d591f6ef0b2b04fc90d2e840329f7590743
SHA512 2c58a879d4022b441056c85c301ce26401da5f7bc9619debd35fa3bd98b5f1cab8f21e2ae5a177865c64e741dae18f39f99fac1cf00c468ba0e281037d5e883c
MD5 SHA1 SHA512

.rsrc/1033/ICON/3

SHA256 4e7a8c59942ff527ff680aa88cc66bb8c8e7b6c02a018bc85ba36794e278670f
MD5 28f8d082df931688124f25f23c688904
SHA1 2f057655ecdd3ab25cfe985714e270786ce16cae
SHA512 7673600f94970a36ce1ba22de6f99402cd1bddcf0a0b5982830cfb9685961cd68e931cb784614a1ea46fc1f3e8e7e955b321e24f9540ebfc29894598f273cd64
MD5 SHA1 SHA512

.rsrc/1033/ICON/4

SHA256 e253c6a87bdd62e771c0ef1b9850dbc9523c51408ca282f994d3530dbbad9b11
MD5 a42b23f1c58701e073db2e9de0b27333
SHA1 f22232cbadff165ceb212527a6d77124312d0688
SHA512 131050fb5e43a9b3efcc1fa57663b08dd51cc8fe7d78dafbc3b51cb372c670ea38120f40bd41f475399e7329effe436c0aa38437cdc758bbe7be2b62bfacc51e
MD5 SHA1 SHA512

.rsrc/1033/ICON/5

SHA256 3731b0a75ab19d96b774da62d37eccacd517c6593af20aa66525dc0b951cdba9
MD5 7e1b34650fb04bc15a494a1d712cffee
SHA1 43e1808e4308baf093556946552f4fabc05278d8
SHA512 f51277fde7fa8e90ba9a6038cc989bcbe54b00fdc848d6de5bdcbb1310bda1ea06be4bb070315b7736e20ac19b38f28c9b6398852f419fd8b0560843ad8bc778
MD5 SHA1 SHA512

.rsrc/1033/ICON/6

SHA256 1b66520d471367f736d50c070a2e2bba8ad88ac58743394a764b888e9cb6f6be
MD5 809457c05fe696f5d34ac5ac8768cdd4
SHA1 a2c3e4966415100c7d24f7f3dc7e27d2a60d20c9
SHA512 cf38e01d3e174ff4b8070fb88ead7e787143ce7cf60b91365fafd01cacc1420337654083a14dfb2caa900141a578717f5d24fa3cadd17c1a992d09280fd8dc44
MD5 SHA1 SHA512

.rsrc/1033/ICON/7

SHA256 250f52cb2d6f1966a29f6ac771fa1cd185b8f8531396c8a4026c0fe635617e0c
MD5 982079681d7ad12766abc44f06946f3e
SHA1 50f73ed0787bf5911bb907e487efbc84a9714e48
SHA512 baf658c468bc6ef53949492d61b47ba15ccac21b8ebbfb73d3e01850ecf0922c925834aec782d92b2478e978244ed8f9740dd67db1e9e612b552f1fdf00282ec
MD5 SHA1 SHA512

.rsrc/1033/MANIFEST/1

SHA256 53e91c1823796cfe349e6a2c745394c8a6102541093a936a29090a7e472452a6
MD5 a2af5e77a85b6c436bb085d04e687d88
SHA1 77579765c6c8dec1acbe283d9a291b7014124599
SHA512 8b51cff20e6a331f508c47c6218728515a46d479324e3f32466c2f5acf76c41e3490b7e051d0c83a74eda84958ecba3327460f480650f4a2fd776e568b20e230
TLSH
T1DE114681D524E566E71202E73FB4F5491579A33B08CC47EDC4C1977DB202A8BC7121A1
MD5 SHA1 SHA512 TLSH

.rsrc/2052/version.txt

SHA256 1debc64ec1f1821f134a16c9cf9777090fd8fef3425719ba4a0d438c78cb732b
MD5 d90f409bf853b156c1f15667ecea6992
SHA1 4b6b792ff44c4a427dcc04e833e69723c09ef3b4
SHA512 485c808c392fa305d7a092a239f9bd4e66c38487974931ddbde632acc1a56f682f4bf6b9ed3e58d87f815b9718627f6d215326745037f15bba08f50a3b3bc589
TLSH
T11E31C20E96FB3698A1A7A9494FE6CC3143533E00443D925E99CC7E8E0FD34046922BF7
MD5 SHA1 SHA512 TLSH

.text

SHA256 51cb43b71916a288f8a5548ced74d2f6e3e6b54ef4c5a163c32f17935765b376
MD5 bb8141c07b2a3b319abc3d5cc4fda368
SHA1 728c18726a8ca8ccd343a6a3b2e4d9acfb97c956
SHA512 471ce3d8f908397608aebcb01e0d6ecbbe78fc325553058696e009ca9cd876526ead661da71b2fd8b130b5c096f222aef5cd789187d830d64aafc45afceccbb0
SSDEEP 768:iTrWKQVA7fwCFiiHYEozf+4SDw/8e0OJC8o5jxzDi:JKHrzHYEafOe0uo5jx6
TLSH
T103D27C527FB185B3DD8B41F15FB5639BF3FAC32A2824875783404F587A28A46CE08697
MD5 SHA1 SHA512 SSDEEP TLSH

[0]

SHA256 d2c767595185bda7d9fdb8a9caf47e7f4e25cd54ede1f1c2463e85f6b537e85e
MD5 7cc5c88ca2359f56d88281ec018c64e3
SHA1 bca136fe8a067904585a09a550303f1b6223e12d
SHA512 2918f5c759d7c9076e3c7ed071d39d7950a7c6b0f6296b3486e9222a5c33a38fb7f55bd2c3330226efde7f32708ed8f88f5d8e986297812fd2ea1b1010b5fca8
SSDEEP 1536:plhwO59pBOCbSaWkcfPYlnK9Z6kwvBnOaTC0QAS:fXpwGSaW9PYIyBn7m6S
TLSH
T1E04302B7428F6CCAD7A3A1965036E74780D837D7634B009B796B230F6891C16A8B375D
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer