991ec3c08aeabb08bad405a1c26ce3f2aa2d70fbdd52168e5cc109f602a65b5b[.]exe

resource
991ec3c08aeabb08bad405a1c26ce3f2aa2d70fbdd52168e5cc109f602a65b5b.exe
unpack001/$PLUGINSDIR/System.dll

991ec3c08aeabb08bad405a1c26ce3f2aa2d70fbdd52168e5cc109f602a65b5b.exe

IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
SHA256 991ec3c08aeabb08bad405a1c26ce3f2aa2d70fbdd52168e5cc109f602a65b5b
MD5 88c93162064d4cd80ec49d25630f0ea6
SHA1 bf5a8857a65d1f3f0041bae6bcdfebf92f5652d7
SHA512 d58863b78e57f8213a5ecd779e374860616c99dcbcdac415845fbff212d4d343f43e6aa19fdf34390d16098ec9c52e120fdf0a6c08bf2729ece7700a94a9d6fe
SSDEEP 12288:vMwnOjs5JAe9xA5cBZPOGfYlJMt0HMKuezifG8xrTPoRI0Xl3YWbQk:vMwnFoe9xA58ZBglJMJG8tv01IWbQk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13455

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 b7823a15e7b1866ba3d77248f750b66505859d264cfc39d8c8c5e812f8ae4a81
MD5 a1da6788aeaf78ca4ae1dece8019e49d
SHA1 d770155e6e9aa69223be198c44a8da26a1756d89
SHA512 eada9c1528563ddfe3d4d8ed5dbc52b85a9190765535b68da90e6d623288bf0090adac5118e1ed6e3cb3e0abb9af025d3a2a73121413a4471a90fd04bc861e18
SSDEEP 192:uenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBUIwL:u8+Qlt70Fj/lQRY/9Vjj+L
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Coaptate.Nau

SHA256 5c3860d3ae80694722b333c870717d48efca825f938bcff2461df7d2c446eb14
MD5 24a13a7dbc92ed3abf47b6330ea7333a
SHA1 e14b91a141b09988445100b7fe664a288010d922
SHA512 170eb10c824923d080469b10d358ad15a67bbb1ff42ea043b66b7131ec585cb589fcfd60f61cf84614c0b05f2c75278f64f59b954e3e57cad1d28c6577078044
SSDEEP 1536:H9CmBeHr5ixWWoyv/MY/iAqq0uSXL8//r:pY8Loo00ik0Lcr
MD5 SHA1 SHA512 SSDEEP

Jouks.Dam

SHA256 cbb1e967b519a07ff8e289459ae0e792cea7b2ebbec2eda78faff754589898c4
MD5 c59ebaddbead3af78456f87319372a62
SHA1 edc91ca1949749c5bfaa9e5f0eeaaa7f7a7d9d69
SHA512 41c77810a31329a807bfb41d5bb7a445a0f17e7fe4c8167682dd79e053c3dc9839ea9c0833dfc4c1225f8d0ca9d61425b682158beb3ea42faa58bb2e1b176a30
SSDEEP 6144:kR3raQS0uIZY4RK/yJIEYk+iEIgxBa/6GWjkbkrNnOmF8yfm:gaQS9Iux/ytYViki6GWpF8yu
MD5 SHA1 SHA512 SSDEEP

Svejsregler.omv

SHA256 af64cd264e0182310d0ade517bc740d0be425004fb5e9ba83ca629741ebf643c
MD5 ad725079e37ca674c24783815f73e56d
SHA1 eff802f43d0c47242a0d4b5632e0e31ca08bd9ef
SHA512 b5e08c043de356d39b8a8c766ef0330ff691b158742ba5c2509ab5d2d3fd34586c528d058af75772cc95b2f9f34e4851be3181f66c01b32067d4276e20269a40
SSDEEP 24:QMukCD2Hl8ook8glN5N5qCXJ2Sul+lR2YO/6wJMxtFimqOmwaAx+Xg:5noa3b52ilwYOy0MbjaK+Xg
MD5 SHA1 SHA512 SSDEEP

aurum.gri

SHA256 83ee568cd19310bed4d195caa98ac99c5eb30a9e1f5025438c3861920ba3cdf1
MD5 13ee4248a8a1892a9cca36177595ba97
SHA1 fe3e99efb079995f0a8b7b1b194a7af7f72c1def
SHA512 a6319733668fb6ef38759620f70561c476ec670fb2c1e772265cd44480e820155adccfe54a39ad7f0ec6ea1fc7de2ae3fefdba50846f8338bb0a12914ee3d1bf
SSDEEP 384:GJ7E4Et0DR/J0YzpbpzsY2/exm8x0CL3z/9m:Q7E1rYz74kxh7XA
MD5 SHA1 SHA512 SSDEEP

concessible.tre

SHA256 c57aac0351bf1fb77d3e1e50a27a0a9d5d8f166a2f98760d1f721d168510402b
MD5 055b8b7c853a5ee0ff56d48912003815
SHA1 b91a15141964d8c655e4090d07f53e074e129d4a
SHA512 24dc6a54fa55208bcd8440b58f85e6cc28f85181e613bd35ac96fb715d1a962c72e903adddf6d9e10dac689d408e1757cc80d47f5f4d659d59ef5b7afef4683c
SSDEEP 48:FEvzbE063mjafzzZB6QE5/oRc+xFW/jCn1wDy9tyxXReqBx3xOpfJaRnqQ:ST4zZSoR4bO1wDmtyxXb3xO5Ja9
MD5 SHA1 SHA512 SSDEEP

fabrikshallernes.txt

SHA256 59f561a506289da69a49ee7b6fb48d88accbda2c38426c3ba487e671b8d17bea
MD5 8e2c6e0bdd15c14e37221378c1a82d34
SHA1 2db3d39c0c14fb9f39098b45e8e6f9121a5b4666
SHA512 eeeeba0f9be8cf39a0b4f4d429d3e344d00e2e655704d2fe5df35473708289947618106109296b1ebe81f721584924651593a0201fc4ba6985e4ee0798c982ab
MD5 SHA1 SHA512

flap.kon

SHA256 abe87bc6306db84e032bf4591028a67fae5b03900ddd4ae52b52a2f2a018a85c
MD5 815a3ebd01eb439f5238fd2c26091eda
SHA1 109d4176fbf8092293d95554f6d77f676a663291
SHA512 785325b632ab1d8839ca44423ff9174ba0a31c438697fc4197dd5a6ab1365c0d966836e42c0c86e48ddeff48866654d499622bc7e28db32ee58a6e446d1287b3
SSDEEP 24:PdVwmt5PGUQdqsXPIcgEow7tfFkzVmM5eHCHeauFAe165yBPuMjkBZxm:55+UQdwjaFkkZ0Di8BZx
MD5 SHA1 SHA512 SSDEEP

holdingselskab.for

SHA256 827cc2a9c9392da5e5bad77c32390bdd50d9fda8a46c0031a2cb9c9389496311
MD5 0eeb0bc44d557386f4fad49709b95ee6
SHA1 6c1e63a2cbcc46dc4be3560d58ab6ae45b87aa29
SHA512 48d4f39b0daa89d27ae7a6586d2e9e3919af0d09e9ac139138bc77fde4f14dfd5a3945839473e53928a7e825a50a3f0b1d3428c218407b943016fbb7c76ba83b
SSDEEP 96:hdyMhawvfr/PVwNnQIQcsHx46McL7mTVBBt:hwM8wvjPVwNKcoy6Mu7mTvBt
MD5 SHA1 SHA512 SSDEEP