RFQ-SulselBarruII2-COALCOMMLDOC[.]exe

RFQ-SulselBarruII2-COALCOMMLDOC.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 c384d26e83f585fbadd73e6cea441d1479d68de5bb647f775b506e5eab7f3230
MD5 90fda5c072fe00e8e737606add7f1276
SHA1 68752dce786a29b815ec5454d4b4aa5f6bc73363
SHA512 df854ac565c084d47bc20e738ee8f36cf040d33fc2b7cb7c8ab84a83b2d77308b522eccd81e23e576bb9f82bf1ea00a50f33435522d8d2070923de0a862a2512
SSDEEP 12288:IgXRAvufNFTr7L6GJpk/0C+wEc80Qu8j4RmYxrqwDwmuu6TNxFu+b:jXRyUNJr7L5vBC5ummYxrPqu6hxFu+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

56:e1:32:25:25:78:12:74:1e:8b:ee:60:c3:c7:51:ce:2e:07:6a:7a:be:2d:ff:8a:72:4c:cf:60:b3:ce:4a:a5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=cradlefellow,OU=Minutise Fragtmnds\ ,O=cradlefellow,L=Macheren,ST=Grand Est,C=FR,1.2.840.113549.1.9.1=#0c24556e646572646972656b746f72696574405472616e6773767572646572696e67732e426f

Chains

Apr 3, 2024

Minor OS version

0

Major OS version

4

Entry point

13564

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

Graustark/resultalet/Behandlingsmaal.sac

SHA256 ded32062860db523c6436b432f22ee503f7706dccd75ba2825a4470d58c1412d
MD5 f8c0fee8de3e2f93e8ea22388a77bb09
SHA1 9bba5c653a1a83a35eb65cbca505c659c59662b5
SHA512 2fcd5eb3bbc0bd881fc4c8e271b233851a2c1b39f8e6db7cd937005c1a1d0ac2f8c1219cbfaead1f70d13d3a7e1c8acb79297ad9efa8f3289591a022eb34338b
SSDEEP 768:YYv2jfcXjveUx72Yj7X5I7TO8Cr6qgLE89h3R71p6qRfOU0Ane1k9M/qlvFNLxI:B5jnc3
MD5 SHA1 SHA512 SSDEEP

Graustark/resultalet/Kliniklokalernes.sun

SHA256 92cc335f5aaa5f481ed32b10f95853a4d478be368f9feddc20f6b7731923d066
MD5 21d2ebdf40706ec8fc35650094126a9a
SHA1 53519ec395f2e3fc49d97216fb54a9a0088a851f
SHA512 b648c3934055358cb18dce32a8459e5475b82c8eac011528e7da4c4d1573d680672d275cfb78e6da26fb40ff72dfb31dd94c91611874d1a79e255b1b074abe4d
SSDEEP 768:uPDccdaFpHi7QWY7vVTnSy0DwPh3PY0YVcf0aVr+LBgaP1mbQZk2hD+FyqYhyNBR:kTOnd1NOBp9
MD5 SHA1 SHA512 SSDEEP

Graustark/resultalet/Potatory.rea

SHA256 05d0f6c869793ef28ee232a704382092e71fa20b9b1a33d39de36c374967f903
MD5 b140848a979aa1806772dab19a298710
SHA1 7a7107a4839f01c3aa087212763e93ecd7904a21
SHA512 a3cae2ce90c61b08143c47774dbe8eca90fbf748f986ca5f0ecbf140f29c57ea50093d12af65b0d565755d4a50f8202edc8fa8a828481c85791e30854c5aef9e
SSDEEP 768:50QftKJWNEsYKIleNCcQySVfmGhwwFp7L9jRspT56:zhO7Q
MD5 SHA1 SHA512 SSDEEP

Graustark/resultalet/Reluktansernes.Ove71

SHA256 07eecf0b61af3a50e22d08856f08e23b6b7ed731bf1e8965525a3b9c39acff5b
MD5 771717add10395b56c27056035a7f725
SHA1 bfa26b09a632998866e235c13c9859b4d4984236
SHA512 cb68c1e0553be1cceec312b487f794252b46393d767a079591dca246d2f7820bf55602613ecf621e315476f7c781b0d63db7deba1af4877b2a1446534b975d4d
SSDEEP 6144:FAFgQ39889Ah6x5gR7+OlnOdxuqt7zR2cfrSG+GBvIzXn6VZ9fMF:G+Q3rCsx5UHa3R2gJIDy98
MD5 SHA1 SHA512 SSDEEP

Graustark/resultalet/Unmeringued.Brd

SHA256 8559f472b29a2d1de1124b1b2aa6d62558b1207a3910048d77b9bb07501e3733
MD5 8418ca27cc3391358049989e80076a60
SHA1 0ca1bae9dfabae917324af7337d1ed8c2b6001aa
SHA512 b6ee3a45200b5f218520c38fbde6b6a30e4f2e847ea890ace3b37a38b14f2c26ee12f21c350052336c67ac725233f1e5b65b1d0b5a4343ef0fca50214b96c01f
SSDEEP 1536:FNKL+KTusOLdVQxd5B+n51ZPsXb7VZcrq/qhgPqpba5Znn:FNsl9Ud2u1ZP87ViQSpyBn
MD5 SHA1 SHA512 SSDEEP

Graustark/resultalet/teda.txt

SHA256 420647e422b79e2daed389a252880cc5f8685a1a04c5ab6537c2712818284cbd
MD5 5da9127f07e748b0da6767b10c087270
SHA1 b3dd5a50677e6cc6c9923fdbe4fb4d3a1fd21707
SHA512 0f6161b9f14c0633992593a4f0e86de3da3b56f975af1a25a59d6790ed590a934256807787967265968e299b1c32af8bc0a2ec2ca200713678028fc960049446
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer