ikpo[.]exe | Triage™

ikpo.exe

IMPHASH 7192d3773f389d45ebac3cc67d054a8a
SHA256 a59da8c3da0e8aa6621ef7aeb786958ea98691060e741ac5abcb328d37f6e947
MD5 6c984dd6faad761de792293a9cd30c1e
SHA1 bc17076ca2251c31ae3b0cccc2030de0fa6dcd74
SHA512 05ea3f148d5b172d6dda8ace37f557a53b18deeed983e65b7c927e45c9edc5b9fe7b7def6761a0a167655f90e165ca0cbf0024833b2f107cd578e6c520ed4f54
SSDEEP 12288:DDGTAY8L9W1KOFxJUuuz9PhigvacmLzlUannZIVlUfND1uAbf43vGxIRK/dUbz:IAzRW1KMxJ6igTmKKnZIVlUPM3Un1Ubz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

24:9b:c4:dc:19:bd:6f:e7:89:8f:01:d7:3a:ec:59:4c:1b:1b:07:77:46:6d:06:0b:a9:b5:63:f1:64:14:93:51

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Proselytes,OU=Laanekassen centralafrikaners Hjspndingsanlg\ ,O=Proselytes,L=Aston Cantlow,ST=England,C=GB,1.2.840.113549.1.9.1=#0c1d4e6f6e6469736a756e6374696f6e404f766572706c61696e6c792e536e

Chains

May 16, 2024

Minor OS version

0

Major OS version

4

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW LoadLibraryW GetProcAddress GetModuleHandleA ExpandEnvironmentStringsW GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle GlobalFree lstrcmpW GlobalAlloc WaitForSingleObject GetDiskFreeSpaceW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW GetDC SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow LoadImageW SetWindowLongW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint SetTimer FindWindowExW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Arbuscule183.spi

SHA256 8ada7765a309782614f93ae790b044c394533212f78f91d48266ac2202bc2512
MD5 ce2838fdbfe604de3f9d7eecd3d8b109
SHA1 347b2c959fa04ed5b8304d4566aa2ceafdf1fce2
SHA512 6ba6a80c56cd46c286d5ced746e286fbff93e72dc1545fe81b194126a68f0634f82791bfa324f7b7c4789a0ad3c4bdddb317498b6f7e0687314d943333e1122c
SSDEEP 384:RQY5jE/TVQNPEanRrjkxpZxX/kJbIxBZlRIW5eEfLgpPt4Nmm0Oig2NDxjf/1UAC:K/TipWX96BEjcR73NDxjX11
MD5 SHA1 SHA512 SSDEEP

Drillemulighederne128.uds

SHA256 46d9e6c1dd22114f227a7d73dc22c15018b8ec12d1ebadd5261e48addd9bf27a
MD5 8cc3f827650fba37d1d41fff392691c4
SHA1 58e78a208b47a4927118278daedf56d7657e60a1
SHA512 3337275ae10ff683c4ceb37523288837a6f1c9c747869388742463ef36223290d13db06a7f4e8ccec5541b2ad513ef3795cc9561c4a74fd8c8fcfebaa82ba769
SSDEEP 768:tz5XBoysukpfziJehaB1S4GxzNmVUwDSb5jAXEgx9Ka:M
MD5 SHA1 SHA512 SSDEEP

Frikirkeligt.res

SHA256 fc799ee3eeb12c56c3c5f686190e896203d75744759b48654ca71399a024ad08
MD5 1f9602e4bf5a409dd260c8e1b734b218
SHA1 354930fb79b1c7bf2b0c8e86693ffdb34759ceca
SHA512 4b64d5577f92ef053935e0f90f14e17fdf964ab3264f72eff0397b1458e58ed809e037a2fe0a7826b2e85ceb9664cf99a1fb52ff42c53625fbd149a3754a454c
SSDEEP 768:VUxRtqBxoKAYhfV1jHh1cCeIxpnVqrHAQ+y9Ec/sAEiw4hYUtkY2rVmO:r
MD5 SHA1 SHA512 SSDEEP

Hostry225/Sambars/fradmtes.gal

SHA256 805f20f1587973cade010c8e75f8a9a5fc76387c1cdbbb5d19df354e770dc6d0
MD5 cc473fcf702c3933d36b69e1d4584d68
SHA1 d3dae6fd32396cb3c18f405daf39a8d4992d086c
SHA512 cf384dc8ae99272d61d6081cba945e4de2d848b9b2433424120a9c9f4d0a6eaada931adbbfab07654b1891a4fff96886fd455c6bc46151ae96379f1d68a6c92e
SSDEEP 384:RQu2Cp+F/gMDfk1//EhKk/PvKfDvLasyNmf+A243W4VHfIUPhNoSBzs/iWCw2F5/:RW7H2vLaLmfhIULB4uwsvrHjaw4C
MD5 SHA1 SHA512 SSDEEP

Hostry225/Sambars/hypotonus.txt

SHA256 82dddd9b8100b1791d26ba706f36072912688c55db0dcba0856415e80b83435d
MD5 121ecbff374b16c44e71a4756d6c638e
SHA1 b3d3c9b1a0ae5f073aa5fda99adf7e1c6fd9ee1a
SHA512 e282fe94e282509703a786fe524688db5a0d1068a32d9d108374171f5e622f77b0c443d916341e0bcc70952fc172e767b42d8739dd26a9da3925bf4a76fbb6ab
MD5 SHA1 SHA512

Hostry225/Sambars/inconsideratenesses.jam

SHA256 472517394afd36e265180aafa07f7f25108b2d4319fa991983523c0ae3f7b198
MD5 b822ff157d6d567c811761f904d0a0fe
SHA1 34241a31c78e38e9de305d46d5bbc7ed12446772
SHA512 767987b9bbcfe16751131c4f8548eb348d58f51c8410a6f71252d6208774f2db0a71419925f4e85cdf91c49cc826d3fbee1fb291877cc1d0309f56e4c9530f88
SSDEEP 768:taqWtYyEjfO2cURueVNXrwtrR1mhVaaD3dcHvK2:
MD5 SHA1 SHA512 SSDEEP

Hostry225/abruptes.but

SHA256 f9ae522a42d67400a935156979072bf181a711c31d8fcea60ba54a09ad48dab2
MD5 c0028c93e675f7a17ab411b8f4d46b4c
SHA1 a36a390d6e9c55a930bb275cb7d28befa20d9e7a
SHA512 a5d309e1c58066a2e4281037c3a94a21b178c757600c2b3dcf547795cb87a5adf67b80960992be050973a0740cbe7a8a73945f0a3526603d8c7346816e95b155
SSDEEP 768:T1XEI1MDkvOd5pI4LkqsRXNIBAfEAtV2+6hdk0ssPVbNYbx:
MD5 SHA1 SHA512 SSDEEP

Servicegarantiers.Met

SHA256 a651d2d6b6ba530c879db1dc2ac0deedaf5bef5202c669523c9f3ea4c5fdf69d
MD5 2833201aa6f7fc20aa9bc6c30ada040c
SHA1 5c2248094eeef1dff5ee628b114bd16e06860abd
SHA512 35cc2c08029c3a64481617a49ce0fe5e7100cedc0b63086e5beb9db40e766bba161fd314572a570aa7ff1842b9b9efd667b425ccf7643abbc74ff4b1aa009bb4
SSDEEP 1536:uUqFkLfHrIXcfwNO759fJbOcF5GbcXs10RkYJulxuVpseN9Oz:uUqFqLIeuObfJbkAKRzzz
MD5 SHA1 SHA512 SSDEEP

Uddrivelsernes56.cac

SHA256 5856282fd14cc06e975a68940f94eb2a62e3472d6f76b19b90270cbcd833e458
MD5 ebe03d56ed4dda51a24aebf00f0ec398
SHA1 5d360fb3a532aa379b3c2600c0b0b3d3b1db592e
SHA512 7ed0d583ac69cde76c841d4bdd04f5e3a1efb7a94f8538d228bdfea99a05568a7675fceffed16af7c7ab06f974b1bd0f151a57b01dd6481f592fa9194cd0b0cb
SSDEEP 768:E75I7wVR9IqI3HJPquKLqh3Wcc1mIFxI0p5IyafnRvRgmyyqSMhHT4:G
MD5 SHA1 SHA512 SSDEEP

Warpages.Hig160

SHA256 8d64e3ed19f8f6165f4778e602126a532a37c1f8e242ec859f024ea4d8479547
MD5 aaa2b700c96ee2b1e605f5fb52aad4d2
SHA1 60618eaa508fc6549b656b2199c2fa27b723f3e4
SHA512 c77c301258a2707d011c8114359b93c5f25a9d24975a8cf1e1bf9d24aabe6b315dc35465782ab37ecc4bd5e9506678dff81b6ac3b763f1b8bb530471c4c1cd99
SSDEEP 12288:vdVNM2wpJzqCsU0H8oQQfkARErXqTZCp8:vjG2KqBUWhyXqTw8
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer