IllustratorQuote-Setup-0[.]6[.]9[.]exe

resource
IllustratorQuote-Setup-0.6.9.exe
unpack001/uninstall.exe

IllustratorQuote-Setup-0.6.9.exe

IMPHASH f4d1e4cd7416ef83f79f7c6a038875b3
SHA256 8bdbb407f4461edea392febf1da0c2b70e3bbf8a03b2733cd88553b1c6daaf33
MD5 d037d70af993749a5012f0b9b9a74853
SHA1 0d001e942854684b392b97984ecc8496fb36cea2
SHA512 5ef1b1e31b403ff841bef24b56dd0c8bba38ddc6c0aad2d7a481641a50d35c36074d89e66c50934fc792d9ed332072fb36463f15435ba009c3602027dbe9e845
SSDEEP 3072:5rv+LsMjvFsOTb98xQT+5U5qwfuL00CQS+VL+OW:BWLsKB0I2Y0M+EOW
TLSH
T193D3AE1CBF268CF7D83245315597FAAF4A256D71895A9A0FDB111E33DC33AB1A60A302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpyA lstrcpynW lstrlenA lstrlenW

ole32

CoCreateInstance CoTaskMemFree IIDFromString OleInitialize OleUninitialize

shell32

SHBrowseForFolderW SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW ShellExecuteExW

user32

AppendMenuW BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongW GetWindowRect InvalidateRect IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfA wsprintfW

Name

.text

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

512B

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

CSXS/manifest.xml

SHA256 9ff952aba6cd9112771334ca772e98f459c752e052d1b0b708c5e6ca4ae84985
MD5 21f92f20536c1f089d7e0a7a3be44f45
SHA1 0151760d66d5694c017d8a0148b57dd3be488f02
SHA512 04b5b13a6b67380e60ecf96e4a509ec324c4594dccbb5200806bb964ad5af0713fe0ae75abdd01f967d5c2bedc29e72187950c7f5a79c7971cae9cc1f64b25f3
TLSH
T18031ACD8C1FDE262F0585125DB9931042FB1C39B4189560CF2FE473A0F96AA923A37B0
MD5 SHA1 SHA512 TLSH

css/style.css

SHA256 09cc7c7a0a20170c0dbbe51bc93e8c1a28ca3cd9635cbb50513afb8cc86693ac
MD5 a1332971e7a347e3173374733d84aa6a
SHA1 711ff973332f174a83479251430ca21bf4deae1a
SHA512 b15807f2e8d6db6d078d0dcacfb2da1076605148afff53521d70305451267783026caf89c19a46eaa6ef6b7fc18db3564916f4a4496d41fe420a7bc32e5c5815
SSDEEP 96:wESSW7mccVbvmqartY/6JkKqTgVecAuDrbagk9S69+e0QFReoGb0ccpvk2tXZgcf:wScclOfvVNrTIvYERFE0VpcqXnd5
TLSH
T1A9125397751433B5A327F3547745D3C8F3026303A62DB679AEE68018C18EAB8592B9C9
MD5 SHA1 SHA512 SSDEEP TLSH

index.html

SHA256 de9e3125d6c16fdca2c9826cc743bc1445f997ed60445010c8e053bb4b653c68
MD5 e56b7f56beb79753568d4df30a917ce0
SHA1 95d9a3245af6b077b872b01f336d91cb6c5c8478
SHA512 e4839b95c79e1a5df991afe1b42530d71f99007b7fd1c56f5c42be6c20c01ff62c231e6156e3530afa415490dc150d697a4bb14688fc390490cd953452bfe7a1
SSDEEP 192:BXzryNDl3hkBrPx2bSOi52LeSsyLznTVcjjffBqWzt/uiL:BXzryNVhkRPx2bpgSsnnhlL
TLSH
T105122FA0A1F86E724313419512E19A02FAA1E607E7E93118B5FD1AF50FD3C64D71B07B
MD5 SHA1 SHA512 SSDEEP TLSH

js/main.js

SHA256 d528d8a05a12b6e4903bf0e4c52e5ebf2f81fb39881d8844831f04f1da5a639e
MD5 db6262e794b085ac5c73ba587c95bc75
SHA1 e245e9248d57e0d9c10102858b2912a6f53b50a6
SHA512 44664948c9134c0287d0376dfe4b30b78a9a46998db7073d8285b019c8c602c27277d3420dffe4ddc37b88c7c2f894f52fe3df5fdfb61d7be2c15f50b0c6eb8b
SSDEEP 384:eFBTaAkqjcyxZjHio/QFt2F/5bNvXRiTHgu9KNNk54hcXycTeo1ZcXH:Qk8xdHio/3/5fiTHguoNQKciUeofcXH
TLSH
T19EB271AAB9E324224A77B17D8F9FA018797799031245CE143C9CD5E05F28C3942BDEEC
MD5 SHA1 SHA512 SSDEEP TLSH

jsx/quote.jsx

SHA256 e0ff581ae98369f035f301f1fcb1fbb9c50645fb8b220b2b9f08769a330994fc
MD5 f0c17526352cc9f99200c0028d878fbb
SHA1 de842028bef8aea58f548876b9807f985b257d3e
SHA512 f576b9160714fd51a3c93438cb3efb2136c0aa012a9716cc27a11d42af168e5a7e04f5809a97e819823554533dd5c570e389196e0f050ce2b939a7aabd6c3652
SSDEEP 1536:1fSYg4rm939G4VT4xCASgcz5jWdw9qzt1J/0xK:16Yg4qGGUxjDC5jWdEItog
TLSH
T1808371AE5AD320255917B03D8BAB9004F279C8875258FE15FC5DA314AF6087887FCFE9
MD5 SHA1 SHA512 SSDEEP TLSH

script/Quota.jsx

SHA256 e93f9b94117b30f51e850918b6390e6298165885849ee5b9f57aaf366d246ed1
MD5 687aa4e574279971e2aa1bbf8223f9c6
SHA1 ad2de38059185e2cef3257314327081d8a80a02f
SHA512 c40b16555f453c00456934f32025861821b730c2d6731c09fe9e3bcab63e406003674c8615c2ead0a86e7fa393832200838e4a403be933cbeae43dcef0fda0dd
TLSH
T13B11DD7299D613086946B26CCBBF422861B159877773DC007DDDA2125F208F936BCBF6
MD5 SHA1 SHA512 TLSH

uninstall.exe

IMPHASH f4d1e4cd7416ef83f79f7c6a038875b3
SHA256 90b29da334b54ad1271a24f3ece42286b572b2d92fc9008bf194df7614dccb41
MD5 2698b91efb0c5f368ad40b19282888a1
SHA1 f2cee145ba6240149737b43e3415cd4ed9dfe11d
SHA512 d9ade317efcc1f23afef46dd6adaa22de2318d2451c290eb95d254fbc376a2bfbf2cbd18e1d0f1d02fc6c3d3fbf8804baa84364a7e9bea556d44edd70886a083
SSDEEP 1536:5TnvHeLrwe71iakGFHmpaoOTb9abxQT+5U3SuxF+itDoup+:5rv+LsMjvFsOTb98xQT+5U5qw0uY
TLSH
T1C1A37D1CBF268CF7D83245315597FAAF4A25AD71895A960BEB211B33DC335B1E60B302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpyA lstrcpynW lstrlenA lstrlenW

ole32

CoCreateInstance CoTaskMemFree IIDFromString OleInitialize OleUninitialize

shell32

SHBrowseForFolderW SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW ShellExecuteExW

user32

AppendMenuW BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongW GetWindowRect InvalidateRect IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfA wsprintfW

Name

.text

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

512B

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ