BenefitsRequest#241305[.]com[.]exe

resource
BenefitsRequest#241305.com.exe

BenefitsRequest#241305.com.exe

IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
SHA256 29b4fb29e554f7742c65631632008d3dc162411ee22552fe75e386bc174af3d7
MD5 7ec58d2a993aa1b84ac13ac8b79533c3
SHA1 31b010160a16152ae34d9723da1562b54c858e2f
SHA512 46d8fe0ef416e4f6266e84e8a8b3fdb20ba820a98df16f7740580297c13df64bafb323a1f5ef4fce59e0743cdfd7302cf1df2afc6c5670ae2f471cdebd0bd64b
SSDEEP 12288:QMw/qS1ZEDK6eS5Z/O51Itwg2XiOQjKv0+PNKgk5Slw9:QMw/qogWSwItwViOQev0tl5Slw9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13455

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

Engraffing.sem

SHA256 7b6c9910ef52c3230e849b5bc001466b2ac859d1a28fe721ca7fb13f4f1a333a
MD5 d29384664c5e387ab69419b0c63459e4
SHA1 d2b4bee5e2e2f43160d8ebb043791839b3a00cff
SHA512 9ab64b52aeb3977f55486298be5ffd1755e51d3b56929197c7da3beb81dd08d86c70bd17d5966af194e9963b4377a11ffef8f5433bc76ed28b48d7f5cebc9fe2
SSDEEP 96:Rsc/EKcZ1kCbS5F0L9kk+ySSWmAEvWInNUJLG1w/PunwgFV2srSO:Rs6EZPSb0Ln+ySSW7KiSV2srh
MD5 SHA1 SHA512 SSDEEP

Porcelain12.Cal

SHA256 df8341843e16f3946a559f7789a213f133b8adf65827b691904aaa99c163744c
MD5 a6a30ef96062fda171816d2b55c58859
SHA1 2a2c10886b952a42851c5e7e6b9c9ac3a91a664f
SHA512 bbf6ac4cabef3f6f5365526e9558ad2b26e8f0175ef2294cde01759a0e1724b31f2aa306bc95d2f597c383f7687499f5bcee4432c303291d2824f79ee3ef99ac
SSDEEP 1536:EXcumSlbZXFhdhJBatdvWNWdcImmdLivoeT6s3+tgD6oPrU:EXuSl5dhJIfWO7dHe8tgJPrU
MD5 SHA1 SHA512 SSDEEP

Sprechstallmeisterne.Tar

SHA256 ee496a040913969b893ecd69e976ed41fbcf97a358cfc2277e616730c5a33f80
MD5 1c5a5241b767fa4fac3f5eb359b92c7b
SHA1 5a01f5244365231ee25d5d3e47076630808e3c18
SHA512 9808afe00a0cf196d9bfedefeedab4db7ea521665d68cc01421a51d0ee3268ee9927480e80325ccdb38ebfbdb97e6383abed686ebd901dcb7bd3af4af741246b
SSDEEP 6144:eHbjSXw4/W/rhhiPHFclc9evCPLNVXffYJRPV6ng2sG+4nSpb7Ej:eHSP2HiP2lcsvqfM6nyG+4nS9E
MD5 SHA1 SHA512 SSDEEP

basiparachromatin.pol

SHA256 b54ddec0043e57c2c6e3a099663df23496da4563ba8b8081c9a8ba9a862770f8
MD5 0bfc1ae85cced4c87360317d11f54d6d
SHA1 4c39d3522ae14acebb6f689799f59979bd595ab5
SHA512 9917a6a352689dca548e727b39a7b76ffeb7d8ffbb927718a7a9bfe26a277d5879fd1ec4e0a273d6831c183b08282c0944e2dcba66a225157c66ed60b235324c
MD5 SHA1 SHA512

potamogetonaceae.opl

SHA256 90238aaed26f9ffb157d84842df779bb178395a6dcbaea5a0a7fc3bdfd2f5c8b
MD5 983c5d5c983222485ce8b632ef38f24f
SHA1 49b520e5b1a231fa3b496cbf11dc6983accdf3ef
SHA512 e1250adf3021e9788d5b57a2053b0ddb378daf73c2268bdc3b70510910754466faf10472c4bb5e687bdddfcaed1c7037b1e4ee383d12b7dd0d1c464235926679
SSDEEP 96:0bHqDUBfoPmovTbMGYugsY0evjAQ+3exi4yD0y4AEYMpdpgoLQIkwkCDe3fRSAuX:gtBQPNjgsYnMQYexNyDbt47kikCC3QrX
MD5 SHA1 SHA512 SSDEEP

senarius.txt

SHA256 81e22339fd52a4b22062a1bbcc8fb25bfd26945d95bff2dadf79689cc5257743
MD5 c1bed2ebf9d34168b27214ae9a374f51
SHA1 9faa22813d1cec2f7c8378637f101a2379c6c572
SHA512 d2b93d4cb027c411e762f9c51cf266c3866ef9c8af9a5fb899a79acb8622ed8b3b01fb937ba5b1edd3c3b54bb6394f1e5c3564dff949a779120afc3300ecf350
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer