59aeaf1cecfeca4ff772e2ce98dcc2a2ff4e0cd552620db1e13538c67771d9ae

resource
59aeaf1cecfeca4ff772e2ce98dcc2a2ff4e0cd552620db1e13538c67771d9ae

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 59aeaf1cecfeca4ff772e2ce98dcc2a2ff4e0cd552620db1e13538c67771d9ae
MD5 04734a6ebcc8400a333be80f856bf62e
SHA1 3d302a0559ebb582319c4d9e88623c15ad2120cf
SHA512 9010cdcede9d4821c341fb50f2229702c9c546c750134d5df73ee15fb566ab3bff3e6cd7da500101ff99d67139e5e9a91bdf80487c83c5166ebd6da6c7044290
SSDEEP 49152:x0TGMhtqhQ6xxMZfsOHlUt8P6rcNy07MqQECsHBL:x0TGkx6zqsOHlbP6rXqDXL
TLSH
T1D48533703364C9D6E2CAC1791C9C5AA2CEF5A94122B9F31F93E04B3D29B2884F71E745
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13596

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

.data

SHA256 539856a721be1e57f2177c25339252676e5a315fb0ea94277931b070103b75be
MD5 2e1d49b2855a89e6218e118f0c182b81
SHA1 6dec8896652c8ce071bf98d265d4cb84c52cba66
SHA512 7a22fd91bc4c4f122ab3354a21e15a0f5925721b44fafa94bbc9c6b4840fd1cd4837187422af1f8f1a0c286865285159ca298aabe19caa421225552f33edebbd
TLSH
T180313554B3E99609F2F36BB16D7588620ABA7C92DDB4E20C0250941F1872904D9FC737
MD5 SHA1 SHA512 TLSH

.rdata

SHA256 87264f2db6e4d93dc7069ea4f0e73d29f9530a629296d885a0caab2bc05a9a72
MD5 f0b500ff912dda10f31f36da3efc8a1e
SHA1 1cc9ff30804e0b3c6f651e34fd058617615d6fee
SHA512 8689373799797fca1b04d82d556cf60c4944395c48540218bfe61c62aa894dbf07cb89a98a08925f4e9a3fd06b491d5385322500fc9056f8aeaec3449d52dcfe
SSDEEP 96:xWPQrMl8xCBv7WPqFdlzDPhxyPYPkcmkJqiyxBjKwrD:xGQrLMGqBDLyPYyk81jKG
TLSH
T12CB1BA9915B80947D6A26F3034791E0FCDF8901A602E630821C4F1ADFF69596C96E7E2
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/DIALOG/105

SHA256 fecdb955f8d7f1c219ff8167f90b64f3cb52e53337494577ff73c0ac1dafcd96
MD5 3409f314895161597f3c395cc5f65525
SHA1 1a99d016d65e567f24449d9362afb6ac44006d0b
SHA512 f3e7394fa49325a7ea46728b77a5e819e18d63049d54c6adf36d08619709484f8bbd20206416d3c1440bd70632d99d9a45f3488482353f90aa21aa6ee3915427
TLSH
T106D00218A3A6CA1BE429DA7DAAE3C3A71432F8045816450BB986F30F5970A91FE59D41
MD5 SHA1 SHA512 TLSH

.rsrc/DIALOG/106

SHA256 69897c784f1491eb3024b0d52c2897196a2e245974497fda1915db5fefcf8729
MD5 2d12c45dc2c029044aaff357141cb900
SHA1 083db861ab3c7db23c6257878296e73a89a74b8b
SHA512 a50dcf605a914f0a6f94b3f815be159c2b729d005a25d6cc9120c4d34445cae2d0b20df3dbdc7672f316010c6a47079265548a1ed5a523896963b1a3ddf98a17
TLSH
T168D0224846E0C408F4365C3894B1CAF22A1478490D00A58BBDE813AB4020C00FAF7202
MD5 SHA1 SHA512 TLSH

.rsrc/DIALOG/111

SHA256 85025c8556952f6a651c2468c8a0d58853b0ba482be9ad5cd3060f216540dfc0
MD5 6be4e1387d369cf86e68eacbdd0e81dd
SHA1 351970fe2681b9b35b5d59ad052011ed96a96e17
SHA512 b81b287de73282cc5a7337559fbce5af01d1a440f04ee97c6a8e1de0c787ef38936c951b802014b841fc517fe7f2b916266dc8c35cd5de1ad0c630dc2218fa81
TLSH
T1C4B002A043B9C10FE5155972BE7AD5B65111F80054345A0BBB64634F1810DC5CF49287
MD5 SHA1 SHA512 TLSH

.rsrc/DIALOG/205

SHA256 dc6a29809f8a42a0c1dcb4fd797e8a467c980de166cc66a83a32192b2f53a1da
MD5 42ffea438086bc96d67864e42e213d98
SHA1 5e388ef762ebb9fa076c6f46d718966eb6670f99
SHA512 c2ebbde863bea6c023d2070b57f57e47ad8396e6c1f80ddd94d13fbc0f858a8ad50054503f5d61aeb27a5f59cc095493f6f53c97ccc342b3ba5ed4f91792d8a7
TLSH
T1CDD002186362CA13D059DA7E92E3C3D31532B414580A1A07B586B31B6960691FD58D00
MD5 SHA1 SHA512 TLSH

.rsrc/DIALOG/206

SHA256 22d4a1e9f8c4881abc6ffcceac4a8466ceef818a8ea296de8008a0a210950185
MD5 893d63dec1e2e03d34ed1b204441cf5d
SHA1 992a45ecfb666bb2161474bdb956bd27758f42d3
SHA512 b2aea9a643d46628dac335534772d95dde4c7b23eb8f987cf53e67531fc0ef89a0909c926c78c1616ad0d39f4d7cb9b8baabb5fe8d78481ac7729359e1ca802c
TLSH
T126D0125956E0C450F47A1C3AC0B1DAE21B6535494D05AA87BDE917774454C00F9F7101
MD5 SHA1 SHA512 TLSH

.rsrc/DIALOG/211

SHA256 e9c101b10de7cb49faad8c6cbc66a8c98b63d107c92fbd6160bf711149450786
MD5 a6e82d7b05a5b3f5961b64f1642a06ee
SHA1 12b290ffc5492d4ee7fcb2398411f5cd8e2f63fd
SHA512 81a5b80940ea623a2e69e864e35fa67bcf72a43cab4b96cd1a4b682e0d1510bcf6e9778965a8ed9f6ecd7be4681669e30bf393ae7d2026449ebb69ea0df7ec5e
TLSH
T110A002500229855BC14559739155D6524226F41098192F07BBA813171C10DC55F04144
MD5 SHA1 SHA512 TLSH

.rsrc/DIALOG/305

SHA256 e3aa57e918a071442241e7c37c02556d35d02656b68150f906dcc836bd324217
MD5 98d883153a1e14132992b81a092bf62b
SHA1 376d6a0a41e9be87867c385cd863356e67d971de
SHA512 cb715176293e196e7c76300666b2bf6aa21210abc2e93ef61959d498f4a99de932cd21f5b3a5f90a7d15e74e0fa97edfd68728cf81882c3c4a61c281e3101334
TLSH
T1EDD002186362CA17D02DDB7E92E7C3D31532B414544A1A47B586F70F6960691FE59D40
MD5 SHA1 SHA512 TLSH

.rsrc/DIALOG/306

SHA256 e574bca7fb2aa385186e38f5e75c3e07091046b36711ec94504003fc257dbe43
MD5 f3623d128301f09f43bb7f2bb05d131b
SHA1 f38f1369324051f74016a0ecb2c0d1f1c19e8ba4
SHA512 c0e90444d7e43d0ad93c7624f3ca18a4f02eace4f4ea0238250ee8c7c82b142ac022d3f2e7a0196d1279057b0a0dd94e15db1f4caf986acbc76a5c46c42a24e7
TLSH
T1C7D0220802E0C440F43A0C3980B4CAE21B2435490D08AAC7FCE80B6B4410C00F9F7100
MD5 SHA1 SHA512 TLSH

.rsrc/DIALOG/311

SHA256 66c5a54fc613b3a72b0ce1651649944bfbef2d0c2068f2ecba821ed82188496c
MD5 9fd86d0859f2cb45a303f2eccbb728ef
SHA1 e5ee9f452cb943e5c3b21783da7abf4a748d9ca2
SHA512 674d3eb89d288bd5d554544f5b947fcb6ab930f3ec63f56055f873ada9b549daa60e16a31c84b01930ff868b08be9ceb9c71618b2788cf7fd58306008cf5c2cd
TLSH
T1BCA002540235859FC1195A72015DD6524235F510545C2F87FBA85A0A1D10DC59F09184
MD5 SHA1 SHA512 TLSH

.rsrc/GROUP_ICON/103

SHA256 57b032d89b5fe07fa472e8b5327d433346f32ec3bcb7c804e303ff02b89199bc
MD5 49691a0fa40df92abbe40df436601d8e
SHA1 1b075d9660f36cef89dcdd826dc80706f8dd60cc
SHA512 56fd3cbe2c98c5819a7882f0842d262b2b7929462cd203ed29922ccfc07721ca51d93aa33ca493b7827cc72946efc2b4544e232b679db6ea62cb9aa9c7a2ca5b
TLSH
T1C2B00211675D4844C5A14F75440703358115D1A405637707065E45F43C411755BB5C54
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/1.ico

SHA256 d88b4f43b7764f9a382330a0d8821d46c41825e2cc02dd50070e3d4d9544386a
MD5 d107d42cffd4769d4904aa5c1b71d4c3
SHA1 8529c60f4c71a6e07c8f269d58b8008503a583e2
SHA512 85c4d8d25b55a313101e94cb418cac0c3e648d80b68c29d608cc67e34ef734dd19780924aba6eb39f3f3f8102f65d63f948dddfb86e751d96dcbe3d318977578
TLSH
T1DE71762E32D9C44CC090DA755ED8E5A848F27D52A89532A837C17BADAB76D93E10C2C6
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/2.ico

SHA256 903d14ab334a150e4cd9e7b39b63b63edc34ba2ce96099d22756315d4bda0f2b
MD5 5070bf16e905c19afab2bd8aff9a8e50
SHA1 022e2d048c626167c5f83d4dfe19cdc13119d4ff
SHA512 2482d0d7550fc3fbdc7eb4e4e0ac80d446cf7c1b7bad341518504d1d44dc6f5b88f7598b6e7c397ae06b2ef2f9819430ba057fc3c993637813c9865431098291
TLSH
T14E419B3247E4C8CCF6D0D43A898B6D7009E5B4675095B6A467D04DAFEF3BCCBE224219
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/3.ico

SHA256 af7640ccc8be688738be00944e22b72a8201a69c7fb385a3df46c3ecfd674860
MD5 e112893c732674aab63d1d5838e66d9b
SHA1 6e8d09311ba27f170351584c6aab0f283abd9c13
SHA512 af680301db3e6a388fbfcee4d4d46bb1236fe0d97cb5aab3f92300a555ff06f93c72fde7fef6a372698fd4e41ab89f5ff9ce3399e1ee9ca6bb898a21dfa45ae2
TLSH
T1D131D0473359A45EC6880D344E5B98B4DD717D74A8008297BFB3BF2F15B62A2E813887
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/4.ico

SHA256 4bf27bcb3063b4b61fb3db529c465b3ede027e6f9e5ac1f41310bb938de9858a
MD5 3f28985f45a2f96c527c8c511dfcf3f8
SHA1 81616567f097119de62dc2fb8d940ec00d6b23ea
SHA512 b1778ff0bd386187ab59c4b0defe59869cc0c13dc56c8a8bd0e1608ce8454387b5973192561a43fb5062edb4559953d30c80740e96c5b0e19edf52aa40f18af6
TLSH
T1A82148361A254CC4EAE8C836858B9CB418B8F817409A7AB523D04D2F5F27DEFE25117E
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/5.ico

SHA256 38cb0b96d95b0f35ecc9b281bfd791342e628c58ef724d4db6b08f5d07a6e1e1
MD5 cfdfd09342be9d9dc03d48711f74e5e2
SHA1 21760483533612c1d9c3547caa2d41e32c835eb2
SHA512 c74eba2cd57f9c0bf485ac183736654065f36741dc0e0db55ed6325a2d630eac9db8d09d8e7cd099070ac5496b70adbbbba682f94e9fc14d08087cacae9a9ae5
TLSH
T1AA0126133A52F2D5C8880A309C27EFB81D7B3CB0BD00402373E2661E2E726543A925A8
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/6.ico

SHA256 47b37deb21ef414edb4fae3cbee2d3ee3bd9be71cc1f64aa5f5fe8ed62fd6f9c
MD5 a265322b7a5a771d8b9dc9659422f1b1
SHA1 582db58d6a6d1c75ce10828b906712c99f012b20
SHA512 2294d23a300fd37f070b988d8f350c2613254d30a6854a281758a2c3449fa4db44056baac3d8ca96acb5318c848789a25b1cd4603b44fc57560c44281cd98d15
TLSH
T1EAE02B5322460A94C00CD032951F7F119DB48116EC04271F43F0016E9CB77457CE68BC
MD5 SHA1 SHA512 TLSH

.rsrc/MANIFEST/1

SHA256 bb972a1ab31cff54d9498bac7f612820305d770b519e2ae7c7ed834ebffe5ec3
MD5 4b3fce490978e3cac272177f79efa52a
SHA1 aa1eb96a8a2e4d35c173b3a502c2e5c3d8afb4fe
SHA512 27c6a7dc54463c29f84335168d8ee96b6fda33e06ab7cfa4c91b430e53565855ce172cfde1347560fba23e23efd0e9aefed9719d2a51e3e50fd3c30800532c92
TLSH
T1E211AFD1D428A0AAF35241F72A38E689647A97AF0CDC86FCC4C58A3D75029CBC762191
MD5 SHA1 SHA512 TLSH

.rsrc/version.txt

SHA256 34f2ff192844329a28e92d4207bab6140094c6fa97e5bb5071a5efff81d77d9a
MD5 2ffc1834ed47f04355304ff766bb4d3f
SHA1 58b662ae2ced8e908286369ca5b03f02663df0cb
SHA512 64c48cbe3558aa237f832c049c2052a1df96211e538dd25e386affb891ca6e048990dd1eb21ba842792218d6a493ab4464c76acfef174c48981d8c32288142a1
TLSH
T133313B0A96FB3258A0EBEA8D4EE6CC3243577950453D925E99CC7E4E0FD30012912BF7
MD5 SHA1 SHA512 TLSH

.text

SHA256 bdc9d4cb04e4eb70ce38209265756fb7d804384f688e2bf446c1c76c227c0870
MD5 1e4066ed6e7440cc449c401dfd9ca64f
SHA1 ed2184745171193425abcb10200c716edbf18b79
SHA512 8b2901030f68aaac875d2c765c80f92ea28e9d141185d235fe6086034e7d738bd3e34e59a1ad4ec21f1263baa5651742b356c9abb47bb36075fc8d8f53b3fffd
SSDEEP 768:Z6X2Y/x9zXNWW8VKoZXvuVwSw7I/WRdxZee:sXDLXNP8VKoV4kZe
TLSH
T1A7C28F1476E0D4F3C97307314E7A67B6BFFB972112E05A8B97202F987853AC2DA0E546
MD5 SHA1 SHA512 SSDEEP TLSH

[0]

SHA256 bed955f185e86bb7c06a922170292787b67fc8e5f7deb89c0a47414ba3c81dd8
MD5 9e8a4de0ae41423e1ca729d55f878564
SHA1 88941c9d29bf58ed5e0f9135215d3f3ebf605c1f
SHA512 3ab8d54ee669808e51df7e7e6c9fe1680a7b48b2deccb5f504db98e984d80fe858e4b748ae90f57f55c39803719dd8cb6a1bc1b56049eb1efb37c14fcc489c05
SSDEEP 49152:iGMhtqhQ6xxMZfsOHlUt8P6rcNy07MqQECsHBL:iGkx6zqsOHlbP6rXqDXL
TLSH
T1197533B063198AD622CEC07E1C8C5987DFF549C526BEF72FC1A0467D21E548CF79AA48
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer