tmp

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
SHA256 7183e7f27a11ea34419d9f8bc7a6be15e98b605d097a4c6672dc8f4998a39742
MD5 5b8339b34ead9835dfe857649c1c6c7a
SHA1 e4e919162b0ade0c35400cda2210e9ca692cd60d
SHA512 073af9d2bc8c774ac20969bedd8bfbb2a176f8442250cbe809c79bf094db1d3fd8503d51f41d640b4dc7512fe1a7bef3e9811e29efe65e0f282a53d47b7be6e6
SSDEEP 6144:54t6LsFHbpVfUXRBczT9/vyyr/4rzsW1Hsc0vBGvfXMVwIn0mmh+EPOVBbsSXWZq:5kFHbX4cXdvdHmHscyo/MlnnE8iQYw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c6:68:90:be:e0:b8:ca:cc:3b:e8:77:bd:2d:8e:98:c0:c2:8b:d4:41:8e:65:fe:ba:8f:25:27:54:69:37:2e:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Chefstolenes,OU=Mosasauridae doesn Backset\ ,O=Chefstolenes,L=Linlithgow Bridge,ST=Scotland,C=GB,1.2.840.113549.1.9.1=#0c1753756273657175656e63794053746f72657465722e5361

Chains

Feb 5, 2024

PE Signature issue

Digest

ab:d4:f2:58:80:1a:85:30:81:e3:ce:8f:80:b1:a7:a0:7b:17:c1:d1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Chefstolenes,OU=Mosasauridae doesn Backset\ ,O=Chefstolenes,L=Linlithgow Bridge,ST=Scotland,C=GB,1.2.840.113549.1.9.1=#0c1753756273657175656e63794053746f72657465722e5361

Chains

Feb 5, 2024

Minor OS version

0

Major OS version

4

Entry point

13054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW WaitForSingleObject CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GlobalUnlock lstrcpynW GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/LangDLL.dll

IMPHASH 3e8d18bb71c7ebbda2ddc2a4bb03547b
SHA256 6dff504c6759c418c6635c9b25b8c91d0d9ef7787a3a93610d7670bb563c09df
MD5 f1e9eed02db3a822a7ddef0c724e5f1f
SHA1 65864992f5b6c79c5efbefb5b1354648a8a86709
SHA512 c22b64fff76b25cf53231b8636f07b361d95791c4646787ce7beac27ad6a0de88337dcceb25b5196f97c452dda72e2614647f51a8a18cb4d5228a82ed2e0780c
SSDEEP 48:S46+/fTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mjsofjLl:zRuPbOBtWZBV8jAWiAJCdv2Cmj/L
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb
MD5 17ed1c86bd67e78ade4712be48a7d2bd
SHA1 1cc9fe86d6d6030b4dae45ecddce5907991c01a0
SHA512 0cbed521e7d6d1f85977b3f7d3ca7ac34e1b5495b69fd8c7bfa1a846baf53b0ecd06fe1ad02a3599082ffacaf8c71a3bb4e32dec05f8e24859d736b828092cd5
SSDEEP 192:eY24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol+Sl:E8QIl975eXqlWBrz7YLOl+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Deludingly/Mortacious/Septocosta/endosseredes.txt

SHA256 7d82d4289f9fedd9d080cd4d1f65a045aa20c022b98dc3840bee141b9b572118
MD5 94bbdd709c06321df6cb5d968de87ce1
SHA1 1b81859dfe01fb3c8a8fd551a92b2c04d96489a8
SHA512 b8d9d603cbb68653b9737e77972183d9f668d00779a6f8d8c1d1f2ece6b6b7b23998c139fd083b514959b21ce4519ffd503a411941c41096227281a3d8cacfd5
MD5 SHA1 SHA512

Ejerkredse/Wivels/Ravenholm/Sialostenosis/Kreture.cla

SHA256 aa29c94affed7df0fb98bf73cf3c80801ba40709d29a10478385eaf449b96bb8
MD5 a169e9364184409ed1208ad84cc3a0b0
SHA1 80acbec7d165b2c1a71f16352bed8550b54278d1
SHA512 b7865be31a93b857cb0f1287a5604aa70a5a5dc18ebce8637e6b401b3ad1a5626a1399d34b83aaf43b3846c10f3e0f2d7944236a495bb03d8f804ac90bb208dd
SSDEEP 768:PtdIWjTZ5LJwQV6FhUkALCrKEwq2Vjh5BrWFZDrd3aJK5frj3iUrIwdSY8JZPkp:PtrTZ5FwVQLCf2DKZDrdKY1X3yDYtp
MD5 SHA1 SHA512 SSDEEP

Henvejret/taktreguleringsordningerne/Olga/Leidnerflaske/expresses.Glo

SHA256 b202dcd6c259f368f72576086cc4b52856eff20f419270e3c96d46d4265938c4
MD5 8b213c67ecb212469c39d7d19ae9b331
SHA1 fa4aef8c1811d7149d9ab8f77a3f613168e11c69
SHA512 2a14c81eb743da07f03f4d171e78b452af90ae41416954175b02ceed4994416a93ce0acace418c26da19385728c4ee616d1b47c0a85b37dcbb50e8f617f0726c
SSDEEP 6144:WafW00QLaJ9sEJbumtAD6244F19lzmESS:Wk0QLaJ9nJbumzV4P36Ev
MD5 SHA1 SHA512 SSDEEP

Hvlbnkenes/Afmaske/Peckled/disquiparation.fng

SHA256 bececeb4b1c87a8a7d2ac196c19b4cd4ad9bbfa62698101b82e0d0c8a763086c
MD5 db3124705d655c4f865bd09b3765ccb0
SHA1 9efa641374d9cd43693a7f8a4db080e45ca49c70
SHA512 2a2d0ae0ccbf5c245ab885efada4b36a141ffe0cf8cd16ce66202f536117bff66bf3376976f17c5c341a125bdbc65bb728419ff60bb18fa63728d549aa009112
SSDEEP 384:4dc/rJRgRjmIuotzdlbD4ztelL8M1cI+QvLb/oQvT+1BzntGts5yDAUc2gAjd0a8:trJRSJPRiQDrBk5GN9drN7xESAb
MD5 SHA1 SHA512 SSDEEP

Markarbejdet/Cheliceral/Photocrayon/Provokatorisk/eskadronen.ups

SHA256 7d5604f7815d42a9a432f6836cd7a3c628dd24dbf33995e5dd980a08b69d84e2
MD5 66472d0616c1c1c242be64479ea5c9b6
SHA1 fd75bf0d1ef03f9aceab09fceb5b55c53906b496
SHA512 8323ec94cf86e787d1fa33c116617975dab4047272e12304a2b37807a1da6fcdb6fea97cfc77daf83b6e47f02d74ce7622b73370adf0c23d439c5551d4aee798
SSDEEP 384:1/BeMYct3QIwUS0w4ki05toF5zxQBzr8huxD7YBjf5aJc1zlcp30y:dr3QIwz0w4M5s5xQ18ED7YNfV1z2N0y
MD5 SHA1 SHA512 SSDEEP

Markarbejdet/Cheliceral/Photocrayon/Provokatorisk/zannos.dip

SHA256 541ddf79e94f50b04efdb22b8dcb3a3c6e7e72db3c91ca75e27d060047a69e14
MD5 db21244aa4a8b01a49802878f7cc0cbc
SHA1 dcbfefa7edc28bf44c4cf6e31603dd97d0c7704c
SHA512 37af92abf1bd27865659c1b8673af70e9ab923473d7606a3697d099dd71888af6c1e87e3582d5988ea9ba57dff1df836b7ed009b83c8f379858afbfd60c44d57
SSDEEP 1536:3ALcfopGEwajdHkEZ1EAg32KdvwIZqZ8rCSsNa:3AQfsGEwajhoRvwH6CSsw
MD5 SHA1 SHA512 SSDEEP

kirkegangsprocents/Fortepianoets/Ureterocystoscope/Krimsk.hai

SHA256 1d44d77a1338511c764d8dfd61098120c448e08a15cbf0d1891dde76ba815566
MD5 057704dc46cd6073bcc7e5f040572f2e
SHA1 85a98bb01345abb9bb207bb33d6b63006238fb7f
SHA512 509c8df0cc9193bd6c71013c20ccf5b050207836b5d16a1c7c862f819ac217858fb40f80a28ddfd4be01c07bca92f774b80783a0df33161b26667955c8bd2d65
SSDEEP 1536:ny6INKELAr90D6KBSm/+G5APHTaM6LoHtl6CT9oBLaY5:ykELCsvYP+hLoNlUNaY5
MD5 SHA1 SHA512 SSDEEP

tmp

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Deludingly/Mortacious/Septocosta/endosseredes.txt

Ejerkredse/Wivels/Ravenholm/Sialostenosis/Kreture.cla

Henvejret/taktreguleringsordningerne/Olga/Leidnerflaske/expresses.Glo

Hvlbnkenes/Afmaske/Peckled/disquiparation.fng

Markarbejdet/Cheliceral/Photocrayon/Provokatorisk/eskadronen.ups

Markarbejdet/Cheliceral/Photocrayon/Provokatorisk/zannos.dip

kirkegangsprocents/Fortepianoets/Ureterocystoscope/Krimsk.hai

Sharing

General

Malware Config

Signatures

File Explorer

tmp

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Deludingly/Mortacious/Septocosta/endosseredes.txt

Ejerkredse/Wivels/Ravenholm/Sialostenosis/Kreture.cla

Henvejret/taktreguleringsordningerne/Olga/Leidnerflaske/expresses.Glo

Hvlbnkenes/Afmaske/Peckled/disquiparation.fng

Markarbejdet/Cheliceral/Photocrayon/Provokatorisk/eskadronen.ups

Markarbejdet/Cheliceral/Photocrayon/Provokatorisk/zannos.dip

kirkegangsprocents/Fortepianoets/Ureterocystoscope/Krimsk.hai