00c518075e6c360ab93b107be54f997108a7e07be12092ba36c68f7d0c6c7f55

resource
00c518075e6c360ab93b107be54f997108a7e07be12092ba36c68f7d0c6c7f55

IMPHASH f4d1e4cd7416ef83f79f7c6a038875b3
SHA256 00c518075e6c360ab93b107be54f997108a7e07be12092ba36c68f7d0c6c7f55
MD5 2d794159dc2004a2a6c5d3592ce5b55c
SHA1 77c5fc42676d67e2d7c6b0a3e67529e79f2eb2e9
SHA512 57131cb86cc729a6b3f0ceb48a4d4a5eb9017573bdd2062b23569a5dec53766eea7dfdcabcbca818cf74fc6282c86e34027e640e886e8cdf724593ae1e79cc0d
SSDEEP 3072:2fVTaMPFgFmTnCu8LQ2CLa5Uoql1yqOg+tkU:iVlWFECs2C48AtOU
TLSH
T106C38E1CEF668CF7D83245704993F9AF4625AD71C99A9B0BDB151A33DC33A71E60A302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpyA lstrcpynW lstrlenA lstrlenW

ole32

CoCreateInstance CoTaskMemFree IIDFromString OleInitialize OleUninitialize

shell32

SHBrowseForFolderW SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW ShellExecuteExW

user32

AppendMenuW BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongW GetWindowRect InvalidateRect IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfA wsprintfW

Name

.text

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ndata

Size

512B

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

.data

SHA256 879afab312bead8f0417e884a42e93cbd17b4b71e07ea3219d29d3808e3d9e9f
MD5 7908121ceae251f69e140fc4d7cbbe30
SHA1 3dfb0fa201fc1fbee154b565ed675d6252943943
SHA512 d1bb9186de4fb8137ec9eb3302c7a30cd937043f5b2b86603b91ffe26c791f39840b4bd57e28d767ddcabc0de5536e1a22ec2e0ceacde298159580320646a7b6
TLSH
T1FEF04833628FE049F20CB0BE5400834A5F0AEC2EC41AA651782A32290CBC51344DB885
MD5 SHA1 SHA512 TLSH

.idata

SHA256 4d1c4bedc2d2847a5dc7134a8f727153b83c382f344af50c3040c5e1794a53a0
MD5 8101a4422d05c015b6a54b599a2b47a1
SHA1 80b64b0f283f037175a9db5d03dfe9c79240f7c6
SHA512 c11e62cc4b7dfc01816e6f7afeae5d2cf366f05c471cc5610461c10dbdfc39b97cf967b354af445658f4711b4b3f3764ded34754b64f242efaaf3fc0ae14649b
SSDEEP 96:t6m7jfLKvUKXm7jfLKvUKbPaH/lGmkTZTh2KPyfeTtykW1M471SJ7:Mm7AUQm7AU8PaHQmkT72OyfVf371S
TLSH
T174B11EDA6C794EF6FEE3053830673D4A8EE04385422DE1862424F67AEBA6095DF5D3C1
MD5 SHA1 SHA512 SSDEEP TLSH

.ndata

SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA512 df40d4a774e0b453a5b87c00d6f0ef5d753143454e88ee5f7b607134598294c7905ccbcf94bbc46e474db6eb44e56a6dbb6d9a1be9d4fb5d1b5f2d0c6ed34bfe
MD5 SHA1 SHA512

.rdata

SHA256 a30053356c06235a212acc39ef6552387f988815f0cfcc70b3ade4032b3b76b5
MD5 1acac55b3c9a3b95227a5980a0351a56
SHA1 4b116e49d9c31299cd6f0b3bbd5e524b2dc68e55
SHA512 999ad899f3d0ee796e8908846fe5092fcdc2a2742c91ad2a868d121d1236282c73a5ec87ce7c881c52586099d915a2b6cd9cd7fd8607bccb9d4fd5de2a154ec1
SSDEEP 768:TspTnXSfmabeabjojHKsJh4TCL455Um2Qtv8fBQUEHl+AEavVg:TmTnCuabLQ2CLa5U3VuxF+0g
TLSH
T1B1336C2CA7624CDAD07AE67689DBDE5281777C724396626F1F232373AC3D790D81B108
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/DIALOG/103

SHA256 e6065cad9c0f4a4c7ec1de33c05b192b04cb96ad6cfb0e2ae0188fcaea6ea7c3
MD5 1d958df872e65e9a04f929c89155e3f3
SHA1 5fff638c5caa7a6f598bfbafd8d8e7fe4f5764cd
SHA512 5198b5b1727f8955fb53fac10593aaa37d7399f780cd0913cef9491d50ed89f13b35b16563acb670885555990c52ca93c2fcc8109ec5b2387f934989e8b5fc5f
TLSH
T1B8E0220183C2CF86EC00F8302BADCB703210B04002328887F801A71BB020530EF230DA
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/105

SHA256 6e7e8576ce6fa04d027ec922dc81f835549c99ec2f29f86feafa46c0d4ad48cf
MD5 bbf0bf5868b31b02973987e9cc8bccc6
SHA1 12fd0f0cf89836f03befaa1d0ffd2154342d1763
SHA512 0b416c4538933e598cfb0f123d06c6c69a57e716fb4d49bde3a10a91b3bbdb3e9dd830df14aa15b6b8940b98c8618a53471b8d4ce06dc720ce7b59ac5e71fd1d
TLSH
T11FF01209AEC4CE17D50877B607E183D77112F83816261513BF87734AE4589ACFD3AA43
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/106

SHA256 c47426270cabd4199bbff8e4fc363265990a8a935c023a8c7d6597a0378e5f5f
MD5 b756cf50afdc5a248bf9f3ff865177a6
SHA1 267b0f95a9f852b7af09e5d909a3febc24ca3ccb
SHA512 58e637424419f440483a95de172faa363fa1286f728ac8f34696343a089c812fad8015be2b3bb2a1feec379353fb3d660ca37f3ab5e573ba60a7efcaa878b8fc
TLSH
T1C2D0800DA6E0D4B4FD417CF5296BC1716704F4571115218BB8D291670804A05DE23112
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/107

SHA256 a7e5ea849cb343e9b58de221aeb25c9dd4a3748070bfba879a30c4265fc39023
MD5 6ffba239dcfcab2080195f23947b70aa
SHA1 bcda1ca8ee9bb9878bde83aa06c670bb5a4d5843
SHA512 93ff2629f63c0600d9169a650b56c2c61eee210b5be7302201de9cca378e10eae85e922b6c2241462ca3abe063fbcdd6183a6e9d6136560eacaf20ede5b2285b
TLSH
T1E0C0126007DBC07DF8044030AEEACBB3B113B080013C5473BD2553531014904CF29282
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/111

SHA256 45ac0526fc85b64bcbb69ca682b0ca4d866a5e42709deaed11ce79395fec63d7
MD5 f90fecb69f0cde5d64f508884dcb0404
SHA1 4baf5e55965823176fa6910a5ec9fdca077995f9
SHA512 a53150dee7980a5619c2f5fe08ab547e588fb894fe64c40850999a56a4fbdaa765b6b8670500f4f704b64d0ea75acde0975dc6ae77cc67ab655f6fdcd87a224d
TLSH
T158D012543AE5C50CE5B52DB1AD71E2E71231F800D530C21F6540150D0191900C925B86
MD5 SHA1 SHA512 TLSH

.rsrc/1033/GROUP_ICON/103

SHA256 628ba0dd20d86dc839fd877618761de8210b0ee71c1d66a843d8af3ceec27625
MD5 8777b2e19e0a26ec5d8efd75e26c6e19
SHA1 39a540613f7567ab90404e334edb52e27aebf959
SHA512 cbd8b3552e534402c4d2f993425760c11727040fc107a0f7c0734a4649be27675ca5dd810588877ee30c76ab5699257c508202a53f467e06762938b6b616ad26
MD5 SHA1 SHA512

.rsrc/1033/ICON/1

SHA256 fbcb64f7d491b5b6312d8104a829936d4ffe850bfcfb3c651643910cbeeb3566
MD5 7da845862a380a9fcb3d05e0df70edaf
SHA1 bcd3bc08576d4472b265832534d15e927a405800
SHA512 b7cfa54ceb0724bda1fd4c5ef94cce22d4f9ba4c3cc98d7b7e168703c14d4aab7c38180e6a5b7b01279029e9cd6f76814c2172bcaa2c88c183ba869e484dbdb5
SSDEEP 384:bJMqeXKRUIHFFGGj2WdLZHALwv4SwIQCYpC58TnqhtDc0IN3QzZpgR07P:13e6PGGV1HALwpPYHec0Ixmpgs
TLSH
T13792CFB88C867D553C743E850BF19096388F98F8F2E56F26085C7E3F0141E6691A9837
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/1033/MANIFEST/1

SHA256 c7830433daf13e70c74faacad8ea367c7a3995ada47b732684fb898941b860c2
MD5 ab0750e401d3092f168c66ff2465d7fa
SHA1 cd8bd97b792ab23a7ddce16d006b1a178f6ea7d7
SHA512 cf2920397df97273262203b4ab3b322df7438f9475146b7745cfed100eb07e14064be85094caad421d2a3acdd17bd75cf751d4d11df27c5cfbec4c98134c85ed
TLSH
T155114681C434E576E71201E73FB4F549147DA33B0CCC46ECC4C19A3DB20268B87121A1
MD5 SHA1 SHA512 TLSH

.rsrc/1049/version.txt

SHA256 87fda317176878f35cf39b79e3dd20478baae1ca98b33152b322e77e0b0fcd4a
MD5 a8761c87f1b489024d9b838acd2d6243
SHA1 d1146b3ab22b5a377a55ce1404be27c68af91848
SHA512 27da229d59ed7f97907851e15fcaaab69e5a143a59d6c202384aaf368176077a0084298aa2b386b7a7273b84d2471ce1f164afe963f39147f55d53061de2c6b8
TLSH
T1FE11731652F73298A0BB768D4EEA8C7243573905457D925E99CCBF4D4FD34041911BF3
MD5 SHA1 SHA512 TLSH

.text

SHA256 21fd7f9fcaaa06a36d41eb2384c5ce2d2ab87ab0a956ce5d5739d90da3050ee8
MD5 a563a89e3a35ee71956c19cc8c2dc2bd
SHA1 a2c8926ee5127aa6e21dbac0255d4ce7aa0454a4
SHA512 67b420f81d4c0d97fc2d3fdd7b9f628ee4ce7446df41074ab58671337b17cdd2dc0e41bd4252faefe357491e38afaa72c042d4010eb750e02988715146e458b9
SSDEEP 768:SE8IPX2siQRiZklqB7xEYYjbHKrLQNISfaCFoH62DO8Dqm2:rf1iQzi7xkjbSMIeFiDDOy2
TLSH
T17B03E61DFB1A81F3D93244705A92F1FF4A259670DC6A8E0AE7A40E16CA7397A730D353
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer