fc94417411054caac75cf2bf020653c0312c669d43ebcc5c2c5a6348b8c03fc9[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

fc94417411054caac75cf2bf020653c0312c669d43ebcc5c2c5a6348b8c03fc9.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 fc94417411054caac75cf2bf020653c0312c669d43ebcc5c2c5a6348b8c03fc9
MD5 4783976d3cdde1581e024848e824d9c5
SHA1 f0abd60917ca5f4346510183ac78395c707e078e
SHA512 cde37eee6c9182eb1598544813b55ff10bc5010297209a57277ebc03c4d2fd478fecb1411e1c0579678e96b3881a6134392efa221e93a8cc1e35d4a6a7b54069
SSDEEP 6144:u5lz/+lxDWF1MC/Zu+ExE8BksJCuJsy2sARJ38Y15qwNqocgONIbEnYlnThLqIJE:2xZExB/Msa3J1vq2OeEnYld2IfoqKQjq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c9:73:29:c1:81:cc:ce:06:26:a6:ad:76:d3:0d:aa:b8:e7:70:5d:04:e6:38:7e:f0:9a:66:29:45:65:3f:b9:ad

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paahvile,OU=Regenerating Reducent Uncinus\ ,O=Paahvile,L=Osterwohle,ST=Sachsen-Anhalt,C=DE,1.2.840.113549.1.9.1=#0c1f47656e746c656d616e616674616c654054796b6b616d6d65733231352e4272

Chains

May 14, 2024

PE Signature issue

Digest

45:1d:91:ae:e7:18:a7:fa:ea:de:f5:c4:f3:e1:d9:8d:86:1a:03:68

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paahvile,OU=Regenerating Reducent Uncinus\ ,O=Paahvile,L=Osterwohle,ST=Sachsen-Anhalt,C=DE,1.2.840.113549.1.9.1=#0c1f47656e746c656d616e616674616c654054796b6b616d6d65733231352e4272

Chains

May 15, 2024

Subject

CN=Paahvile,OU=Regenerating Reducent Uncinus\ ,O=Paahvile,L=Osterwohle,ST=Sachsen-Anhalt,C=DE,1.2.840.113549.1.9.1=#0c1f47656e746c656d616e616674616c654054796b6b616d6d65733231352e4272

Serial Number

59:82:90:df:3b:e7:8a:cc:bb:01:7b:1a:09:aa:3b:4b:f7:8c:a5:75

Issuer

CN=Paahvile,OU=Regenerating Reducent Uncinus\ ,O=Paahvile,L=Osterwohle,ST=Sachsen-Anhalt,C=DE,1.2.840.113549.1.9.1=#0c1f47656e746c656d616e616674616c654054796b6b616d6d65733231352e4272

Timespan

Oct 2, 2023 - Oct 1, 2026

Subject

CN=Paahvile,OU=Regenerating Reducent Uncinus\ ,O=Paahvile,L=Osterwohle,ST=Sachsen-Anhalt,C=DE,1.2.840.113549.1.9.1=#0c1f47656e746c656d616e616674616c654054796b6b616d6d65733231352e4272

Serial Number

59:82:90:df:3b:e7:8a:cc:bb:01:7b:1a:09:aa:3b:4b:f7:8c:a5:75

Issuer

CN=Paahvile,OU=Regenerating Reducent Uncinus\ ,O=Paahvile,L=Osterwohle,ST=Sachsen-Anhalt,C=DE,1.2.840.113549.1.9.1=#0c1f47656e746c656d616e616674616c654054796b6b616d6d65733231352e4272

Timespan

Oct 2, 2023 - Oct 1, 2026

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

13145

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sammenrulles/Braniff.Kla

SHA256 16618b06645e1664d79bacce6292c9f0b68b7224a967440fe528de5bb51cdbe1
MD5 0272260dbc94b5bdcd602390f481cf33
SHA1 16dcf9d2a7d1b19829224242b0ced3a902a4bc28
SHA512 83ddf37d7e28ffbd70930081c70f79428a7f758464b6ea4c4b44f6592440a73f0c845e9a66f4388481d2996e3c6b64d67c77d3eac45c9b2e411321d906c89bc7
SSDEEP 6144:DkwazEFJtFpDh/UtFdx81P1inCqW2xBqXS3KhA7xVGIQxINbC8Ffc7bNCMmKsBNG:OzW/FZSvCO3oS6C7KDufgNVeTEqBCX
MD5 SHA1 SHA512 SSDEEP

Sammenrulles/Denatureringsmidlerne110.txt

SHA256 d5099e34561935c0fab283fb3446a8e5177af97a060d8436b6d699929ee7de9a
MD5 018fd62bf51c9b979bc8043478171ba3
SHA1 20dbfbd2eed63e61c1539133ab7821815db17932
SHA512 4851011649b2e074736cb7041795af9a1c22f5fa164a4d3050df551899a49c64ae9c3aefbeff5913ede4444eb19840926c583ea5311250b7936e1e22fe97869f
MD5 SHA1 SHA512

Sammenrulles/Tuboovarian.Bes

SHA256 cc5337563d651aeb640f60756575aca0577c3d3ed095b62c3ef22dd4cff80b38
MD5 8f46c66e37a47debf2ceb97627daf2a3
SHA1 36641ef431b726a53e5147889812bc805e26115e
SHA512 737212d4473548fa09ab5fddaa3e72c9ce70738aba66b3d05838f4f9a5669c19fd87a236a56b9ee9c6ee611b7fb697bcb4e082d6fbd753a8b27e5d05276aad1b
SSDEEP 1536:J7+Td+CZ/HvE772ih86mcMZFIJjLxH8X9CAIE+diC0H1PVcb2:J7W+IHE7ccQ6NfgvH1Pu2
MD5 SHA1 SHA512 SSDEEP

Sammenrulles/kvadreringers.une

SHA256 44a78467a015871fdf3e8387077cb599bf0120c8f81fd16a40c8565cc3277f76
MD5 f980ad39774af295f010cee66d637af9
SHA1 572f45095c37030c5db925a84371b46ffa9d4015
SHA512 ddaf2e57df63a0ba816de9335be52a2c9dbcd447ffaad1939060c4bcd04b26db177617dc9e6a1f76e24a79429e11f7a0085e3106621923c0dde9cb31fb1a6892
SSDEEP 96:yS20RjczCXU9Mr1HLn5YrtPxupCKhkjtgD9kkt/GVmXrXGHHf:yS2mICXUMJKxTnts9HNyf
MD5 SHA1 SHA512 SSDEEP

Sammenrulles/skandale.bre

SHA256 76fa0210829854daf1833905195885213c94fee413611ab9742c249211ae8bc4
MD5 588fc9afe5cb843335db72f17a1e137d
SHA1 130de5a487f53862fdf1b429a1145ebad59ed2f1
SHA512 da82791ff1926fe18088380667707fe97c439d473e5ac0205ddc733a652befa07ba2ae4e6feaacfcca3209aa5e6427f1f85ffe2d8e10d6c0cb2dc8fa3fe82044
MD5 SHA1 SHA512

Sammenrulles/svingfjerens.opl

SHA256 45750945c694dd7cebd3d78fd9a7ee6370a0b9f31ea64414c6bb35fd877802b1
MD5 068fb16ec42cf1cda86444125b48ef88
SHA1 dbad12b17bb3128163abf9cf5d7062ad6bd89a36
SHA512 33fdabbf543cf64343cec0fdd6c6d70891c20812b40e97f0e2ea13770dbe9c4402413ab5560564346d7a5a9d6b2df5ac5428926b3ebef0b8e06d510ddce36300
SSDEEP 96:yPotszWUM9are3lzOr+bKtAe0o/kylv4CvCDnoipAADuUL9FFSd+y:qoUWJareVf+tAeP/kylv4gWoipAU57ob
MD5 SHA1 SHA512 SSDEEP