Sample details: 2a2ac4babb1300de851d57d510a14929 --

Hashes
MD5: 2a2ac4babb1300de851d57d510a14929
SHA1: 15b61ae287b84ffbeadf30b23d7fd8186f6b6427
SHA256: ea0da514e5649f8c328a9204c295f319e9582761208dfe60c0c31e2621400d01
SSDEEP: 6144:Nvgyydpzr7hsgjzQlh9eWzJXtuaTTquUw+qEl8/bQ+UKu7SzlhkLeQXYquuD0lE8:NvOHnbWMi+aqzw+n8j9UKPzse2Yquugp
Details
File Type: PE32
Yara Hits
YRP/UPX_v0896_v102_v105_v122_Delphi_stub_additional | YRP/UPX_v0896_v102_v105_v122_Delphi_stub_Laszlo_Markus | YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet | YRP/UPX_wwwupxsourceforgenet_additional | YRP/MSLRH_V031_emadicius | YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h | YRP/UPX_v0896_v102_v105_v122_Delphi_stub | YRP/UPX_wwwupxsourceforgenet | YRP/Borland | YRP/UPXv20MarkusLaszloReiser | YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser | YRP/UPXProtectorv10x2 | YRP/UPX20030XMarkusOberhumerLaszloMolnarJohnReiser | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/domain | YRP/contentis_base64 | YRP/UPX | YRP/suspicious_packer_section |
Sub Files
04b30152c13fbdac569508f7f57cdfa4
Source
http://hussaintrust.com.pk/ht/pan.exe
Strings
		This program must be run under Win32
Boolean
Integer
ByWl'Word
TObject
rface+
fZ]_{A
w;;thsz
|n~Mqf
->Vb1*
ENHZ&s
u0NHJO
+t_$xtZXtU
0"	w%9
~KxI[)
SOFTWARE\Borland\Delphi\
FPUMaskValuo
HZTUWVS
TmrQoz
0N|*(}&
2 GA4k3K
<\vX}%4
{ FAlLu+'
kernel32.dll_
GetLongPathNameA'o
oftwareoV
cales27
?  t.<
/_}]h~
gowfed
&Disabl
FocusD
efaultPHotLigh
>NoAcc
mboBoxEdit
Windows
nND0wStaJ
|xt9999plhd9999`\XT9999PLHD9999@<84<9990,(|
<84099
,($ 9999
Magel@ MSWHEE
(_.SCK_LINES/K
8jtoi9
ym|r!9 
	TFile.
ceptionPn
EOutOfMem,
EDiv@.
~Range q
v0idOp
VfX"y;p
TThread
.TMviR
dt*h?x
o YgB.i
r=<9w9i
9X5:P]\k
 (()@-3$-	*-&
:sgF&Q
0()(2)
8,fk<d
_vpj^v
8aMe]X
`_AM/PM
+(bDm`]
SU<HtH
\N~3t7
GS"<dXs
I!F(%J`
5'P'?/c!
L|m/d/
kFreeSp
AddSub~"
/od_nOr
Xor_Cmp4FromSt*
!xImpl
HetQqX
Ft?Htb
t6[u&h
&l9Q9$
76r0!7
&|yLwK7`r
bW^VP[
Nu?R07s
Currenc2
?Unknow
Pr~Nk8
,7$L!(
{DgJ:9
o5-wz$|
.\rUD?\
TAlignmens
O	TBiDiV
6Shibs
Middle
sAdapp
F&G6<Hp
4T^XNdN
O_<Q{S
.tTJeV
TBjicAc
[n`oe(h
G {	XLHt1*
^P>Z:@
)3ypiL
=3|"	L
;;<-fS
qK^Lp/
2\+c`vI
,"=doB
_!bQG-
 7*h:-
k3IZv}
TPropFixupd`
KI! 0W
<	wb6f
[ahB=iP
l0B,E'
5B%@W2&*
g%s_%d
)^J^/i
:OdH9b
uI%/=0
gHjl0"
W1dz W
3lixete
u1cO}4@M
06)L|"
psetiG
Boross
>WBthf
xX'O;!
edImag
*TJZk)5
LimegY
	FuchsiaAqua
_ppWXk
r\/Bt:
?foBh'
hN.?Sc
ANSI_CHARSET
wDEFAULTi
SYMBOLc
IFTJIS
CGJO Ba
GB2312
TURK*H
EASTROPE
%VXV;P
~WEHm%
". $h}
T24Gd$
y8U9v8
kt$+t,
;14]t}
269/VT
=otEw?
|$II;E
`hb:#Lt
G84=6u,
2nvq$}
tN%t"a:
E1~6,S&
7hud0`
j0|WpH
6ISPLAY
6W+u$G
3Viewe
(Rd{0B
B^D68o
nhd&An
F6SB`6
-_how+
u	ZTQWW
_WE;tA
 qddd$(,0
2 ,l0%
xtheme
Close!
?Part1
mes?gEd#
1WB`/T
>(yO4N
D^7bs4u!
d@QXIx9
!po+gAw
(%I"lu
Gi.$%+
Q(C$-D
pVDf4!W
h\]GVx
mdlg_h
%<=-zg
Hb}	cZV
I$VisiJ
;HEXiE
F t`';
1W%H)!
i ,d/v
/3b{$^
<0p(h 
hL2Vpf
 2001-
2 Mik2
jllhVX
 !"#$%4
T*b[ ce
2He#f$@*
bLayTt
-KUMmH
2"#L%W
\*+\$C
 C12	M%
Qr  !@(
	@/u(D
n	F'BUTTONW
Ag:wtB
?H#''g
l89-a 
7IE(AL("%s",4)
,3)" JKH
JumpID
n_WINHELP
#3277x
F!5'e 
FsrIgW
blujRF
>$&=Jvn
fxqR/4
Hb)^E;
@OWSEW
'HSplitV
 $$((,T
Z2Ud8H~DP
Q~Rhp$U
hgb&tm
wZqWLP
P]otW_n
>'T^[4
|X%1Kv
'G$;~|u
7u.4a	
(r\@v;{Du
W+8r	9+K
"DK2S@FO7
:_Wt+G
I"F+t 
5!k~NN
_mh0uw
%P>a94y
r7=@w0
~T6C`'
7' ifI!6
KF.1*T
+Bv[<[
 Wd-\h
%Nq?("
0C@@CR
i*Mk$1:@@&@
p+*q)cCX
HP;t@$(
dkQH7@
m1@xItg+ t%
K@8FH(ti
.P`^7G?H
<Bh =o$
C<xDfR<Q
2 M(C{t\
^'axl;
6$_PXR
X^t(M"
SfP$>~
x8TD+B>
wiX_W*
zp`9W0
q)d,fK
^z,QWY$T
M=_0PJ,
`2@3pIV
^cMM Oi
hEFH%@
@YI 2!
)MC@^*
lCU/)2
&UWX`$
O SRR$
+W$;3w
Xy[`nF
-i.N&,?D
jo@k k
mMximm
X$'G^BZ	
#Wmp{"
W4:5hG0
fs/7w*
`(=Hvn
C<gH:T)
;P8u+>Aa
~o*;~8
VBTh.(
4MLL88<<
qs8VV@
0;c	Uc:
"BmiH6
wB8`<|
*P0IB%B
WS,fFY
Zr hd5O
Rebuil}
L/MLFl$
TDrT>$
keysK<`
1234567890ABC
(GHIJKLMNO
@STUVWt
4J=zB0
AO`-KfZ.
E[ $@AF.
aB1	<$
\H d`E
fj`GJ$
-0)u)j
?S: GD.
;AZCE|
6Qu#H9
pL6U<X
D*#0-@
T5`NN&
p6HnH5
P?:S?7-0
c~QV$/"p\
TXS@JC+
#XnHtva
uVEP-?
-:P;~;
X+*f'Y
m@ygH=
Vq@,	w
G8"MX%
Ih;J4u
_](8(T
>@ic0k
?)PWpe
Xegul6
BThumb
>phaBl
-Wvvwh
ixTsPf
gKS`!b@gKp
s\,JWE
#pBr8/3I+E
A,(^3~
t:2rX#
n4n6f@
q+pL-(l
;S$P^u
ofMm"F.
'$1@ZM
h^d.IWy
G	7= t
7p XJp 
t#{PVsnsx
t5.-P2
k?79.t
t;Cpu'
L2NB<WVi
LIENTW
B =$e/&f
uu0d"@+
.I.BW 
6NlAoJC;
t#;ADti
.\A*6U
b""R5g
dT|'dz
c4px	Z	
p@7b}-
(+qwv$G
+50mr!
]ljT?K
XL]$4I,
]BSO8g
 (4&hGY
y*M[Ddpp
n_a!]et\
>X0;sD
M`M5}B
&_<{Jo
'<sL.H
MAINIC
IGI})@
lEx@4N
t4/xDNZS
T;)!{`
FBx7cO!,
	,qn(;
d,P[oM
0Hq83!
S7xGc%
(? ZPr
B51DV@
;{HtKS
6>CHYFMi
O;^`u0
hw@D?YEE
iI1`&;
Q@h"%\
q4\K\y
atq zEpW%7 
Jl~l':
K^`rjxNK0
r0]WAe
~k}.q)`7E
VqP~Ds-
-.6,[J
Kl40a?	
JG %MQ
7T,v`G
gICc3=^
/Dbs/.
}AfNBZ
%qfU#b9-
C 0~4r
VR/Wct
E,YF L+G=
WQ 2r.
>ryA|Z
zg|)*|
:xE)Hz
X	F=<h
MrJDvNzdBIr2Kqnh1X2
4j77dNW06ubQcw
%.*d$lF,
oVp!m@
/?N_n'
wXp$`o?
\|4Cs8y
4""C['BQ
*y8Z?yvJ"Qx
[Q&B"Q
Q& :"Q
3PJ^Af:
'L'QHE
Dc1'>fC
	w&rP'H
'L3'L3'}n
L'L'M'
vJ,'m%pv
0AU5j?
]~C]<h
\7z7>Ho
'y|?F)TF
*xP0L)X>l
\;z?q|
dFPIM>
]JB8GT
Sg|VU|
XLqlnP
hSE)VW@
K9xQl8
1iFSP0
6\)~(o
&~;sZ~
8[|\9PJ1
aFv>PS
Yr]z%[
bDlo>R
T0*a@h<@1G:
o~'Kin
2wdr?)R
{zFPK1
mm~sTS6
=u2o"HP
`,SIPW@_
&n@Iy\
lAz0Z6,
@B?1on
@0K:7>
S&Ob^Fh
)-90+4
H6(l2GJ
cp$F+x
8;y"Js
t%gfbQh
!S"KP*
-	g/AZq
#Z\4z-
L4/:DxNo
4S|6bA
r	x;0Ays
5P2"}N
GQ(bWMoMt
_%@t.'
qqT d?
*vx[Dc
<Y9|AL
M!^d{|
wX2d-W
)6NtGel
?h9^$Z
?PS:Po
OmTd1.s'B6
q(j![4
L	%TS]\
AbZD	-.
j4:B0|ef
YYahjPa
Pj\fPC
8?N8s 
l\)=Ex
)\4Qr0W
^4nDX<
o$N2gG8
(3Z"i;
w[0,RI;
g3\*h?
m`\hEX
XcqJ$M
O2Mvc%N
j>`su99
kW*3p(
GdX'5q
=P"1j5
./6?1~
FbrLd/
1L).x`
Kxl`{.
MXDZe>D
y@3u34
dbqa-0
m~7P>s,
"Axje*
L@s|[NP
y(0rl)
)5O6Pm
8"JAaVc
i[B.*>x
W9<-WB
$,6DZA
HtY8\T
AbAaH>6N
,tPkap
D8eLt/C"
yzBEbG]J
=A'(6t
#ucwsy^
~';K1y
~V0'eL
^`i_si
#HziZ{:
|2lk@F
]x/xaG<s
./L#^hX
s+m0pc
	xQq(t
{!e=]``
?sI ,t0
besW`*
3,psz6
NbeH`h,
 ~-Hw%
-A^aUH
"1>XxA
%1P_dn
+V8t7<
[W{5G<
pxGU)ex
r!eTG`
|zB9LsNz
!48f[p
nkcB[?
xPpJ}Pw@
b+tXbU
V<l$OH
W?D)	n!
/fWrLp\?
XI6av).
KA#^x~]
v9+Q$	
aK8!Ep
>TR	~@
xmp6)plt
0,V(1Gd%
LezH,Lt
e/>|\W:
t*X!yG
r0f6 BND
uI7bpI
mT-d.t
|vb@2g
w68#}U
`EG_.2
xK+/*S
(Z`,"`
7 n;y0
0j2;7v
V[@g_\(%
Ilke:Z
Mx%@yeN;i2NDm
(j,?-cr
%b/n--eIjO
x1Wb|p
Gc]1X(_|
?~>;zJ
WLR?jA)
ni$]*K
h7Zo,8
&^e-1@/
c wAFx
/h?$dLK
hJwdq=
F"u8ha
|)gJyW
\{y^<o#
xNXGB.F
pNmWvq
|ip 5<A
A6I)tBz
c7.`4k
XXf<&F
[*;d|0
\Hk>A7
yfbV+M
W3)Y~!ty`
Pn5mN{9#)<EQ
9ugMW7
X `K6aH
nZ9(ijItI
T:v*C	w
?lt!}/
oZ74/T
]Xq;:e
%6?ay-
zzC;QE4
.WqW7R
'*}cB_
Fw(v^]
1;/Ms7
xjuac;
`_q9YB
Y|-@CrmQ
Q?XBPB8
7R+S2=
@xN??7
%@)2yt?
pbk]QFg
pz^XjafJ
J5-P2U
^K<o3~
X}hT<lR
5t&5FG
\ks.7^O
a93/-R
As=(@`
 VbeUM
okk}EfH
@IZ<	6%d/
FwRjXZ
*SJyb91B
xZo1_*
y(VOH`
WW,],IC
QZNvc#=
qi[ n_
W.R_yVtn4
)x8bT 
*CQ	h+
MHAJAT
`2j)i!
z>IO<):
}XbaA|
s{ll!R
FQVF,F
6\EouB
cPX@:)
_!L)g`
TSEP{B
qK8qw@
y#C~.ls
uIW>AB
\lRRk@
`JX74c
-+61XO
{OHsa;
z42',`)
z6..$Q#
<O%iw+'
skQ [&
L/!+W)%
}-WXIL
pVWgn_l
+QpN7f
ici%r9L
DuF\pboJ
l1^~%nGK
y<7GMI
c}Zv}	r=8
/\(;M*
V5F7m^
M\XY, 
G-h^:_
^%8wFf
aS]	Yb
kyFovd
0mm	?gM
c~sRa2A
n~tV+6
CSjlor'
2}GUJi
MG{d?an
bW/vn"
o8hS-7ng
3_XCwd
vkqfSs
5}Xs?e
5S?dUp
uE6#n#
K+`5\]
K)oh@hJU
)f -#.e
P8Dn?8
cpyA	k
/}Virtual
o{epEx
Librar
Ad]LVf
]4u4AA#
VZchBl
jo%S0	2%a3
{Q;Eta
PaMq+>Ofl
[A[ook!
XfscTh
o2!MX#
rQmUaGG$G5!GOG
%mT]]#
&QVl]8
,`DATS
XPTPSW
I3')+*+)))*))()*+++,6J!54 CBA
jYPQTVTSkllZTTXRTUiHceWda/
}zy|yx~
{|yvrrwsqpon
KERNEL32.DLL
advapi32.dll
comctl32.dll
comdlg32.dll
gdi32.dll
oleaut32.dll
user32.dll
version.dll
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
RegCloseKey
ImageList_Add
GetSaveFileNameA
SaveDC
VariantCopy
VerQueryValueA