c4e9719f719092bcb6dac7893d6e3601a32ff93a9ff5d51ba55af82cebd902f5[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

c4e9719f719092bcb6dac7893d6e3601a32ff93a9ff5d51ba55af82cebd902f5.exe

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 c4e9719f719092bcb6dac7893d6e3601a32ff93a9ff5d51ba55af82cebd902f5
MD5 904ff58ae02442b30663c9be0f4d9e77
SHA1 9009f89ab55e84c8bbf70303247c62f8048deb77
SHA512 46aceab3cd6a6ba0ad1405d4c4f124863f4fc07a5dd0ee7df2c210c285eeb0c367d91d4e7e6e7c4865e6f494dbd3c211fb09ff4485621f69e819be3ebbb722fa
SSDEEP 12288:K2Co9kUzVAtb/WMdXDKDAObjsZt7P68BmPE:Kt39W8aTbjsH7P
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

78:97:2e:bf:a6:25:f3:1d:0b:ce:f1:8a:10:2c:f1:e4:1e:cc:bb:01:1f:43:dd:e7:58:46:41:13:b4:23:ec:a3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kreditlofternes,OU=Virak Arbejdstimes Overwhelmed\ ,O=Kreditlofternes,L=Villequier-Aumont,ST=Hauts-de-France,C=FR,1.2.840.113549.1.9.1=#0c1641766f7765646c79405261616372656d656e2e536865

Chains

May 16, 2024

PE Signature issue

Digest

1f:3c:85:44:6d:6e:75:60:f5:e3:a8:ad:ec:ec:fb:2a:97:e4:f3:98

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kreditlofternes,OU=Virak Arbejdstimes Overwhelmed\ ,O=Kreditlofternes,L=Villequier-Aumont,ST=Hauts-de-France,C=FR,1.2.840.113549.1.9.1=#0c1641766f7765646c79405261616372656d656e2e536865

Chains

May 16, 2024

Minor OS version

0

Major OS version

4

Entry point

13477

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
MD5 75ed96254fbf894e42058062b4b4f0d1
SHA1 996503f1383b49021eb3427bc28d13b5bbd11977
SHA512 58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
SSDEEP 192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10647

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Andrine187.ser

SHA256 4b382a3d71241bfc85edda0e8ad1986c260147c94cf3cf508316f7db85281d04
MD5 6d906f0d06397be33a3a84e86886d3e2
SHA1 ae16a597f51955460d7ab6d9248660d3de491e06
SHA512 e71e78b1f67fe7a76b104621eefe9d3673933beb88d9ace4bce1e2940d23bb5ba9fb099b0800a44588826fa87992b6ce58ca36a62df80486a1cfeeee1cb04558
SSDEEP 96:FsvJCCKOj82gEuE40oe93+iehuJ2lz602kXANtx4BrDm0wo6NM:WvJCCKOPkE4de93m8g602kXmxarDmBS
MD5 SHA1 SHA512 SSDEEP

Consumptional/teparies.txt

SHA256 b2855b9f573e4939d16e68be2e1bf2168b4c53800d65126092d0fe9d1e7d6fec
MD5 cdee9de1b0c6c0669575f408b400ed19
SHA1 73fc3fd6df02a029b02d72c0522d2d1197a37def
SHA512 fd2971d0b78cdf932003b65a5ce52639e35cd08603f0d75dbeaf18db71368e934c109fdbe8176ece4620f36591c9bf9f8c9bbd1d6c88d3a003d1c01e49c11b00
MD5 SHA1 SHA512

Fladser.Srg

SHA256 512a2b60cea5d5aad8ef0aa03153af804f813aeb293a1a10624bc6ac896781dd
MD5 18345e7223258645bff4cdbfcd5f791c
SHA1 8bd20034c5462424b6571f756d0af13b2441a495
SHA512 991ba8583438cc2094e95a551711c3f7096a60022020426bc038afbd958d513b7073851d38579d84c2897ba9de01a9e217327d429a8232987ea1130aade393e7
SSDEEP 3072:x/zrfH2eQPyocXt8QgvvZW4ZhBh95UMVh9cHx4RgwerqIzZqdrzdHVR:129fmGQgvZjv9SFHxQ2uCq57R
MD5 SHA1 SHA512 SSDEEP

Raasejlenes106.app

SHA256 de89eb65a4e1a9879ecb935e5e2f98ababa3fc08486bc94f619a0d2ccb97e969
MD5 158b99c7bfaa74f4be68700ce566a550
SHA1 d1969716076d71e474ce83670e80cb1b6299ad40
SHA512 1b3cea9638433730a1dddb2470f26fb2095a4fc0a2deb060c5206b28c27842428825f25cb9d8470f03c4172b662096b75c14956ee8a4c13c1a47d848a8ad02e1
SSDEEP 384:pmcJvhCqDL5dxCdvxQ/RQHEwR9EQ3n8X6upt:rJg8JQJCaVMvt
MD5 SHA1 SHA512 SSDEEP

macos

abaxile.Dag

SHA256 bfbe6c92f227bfaf76d787462b89c1bf3c1ea71fcdc94773fbf17a7253fe2f6c
MD5 cce59fdce3cb0fea5d0943e2895c4377
SHA1 7de9d28b2882ac545f0c2384969d7f7fbc9d1250
SHA512 74991f04c08aad03a578be9fa04261efb9ced449007e9b438f62c09359abbcaec0096cbbaf04d5e757fe0bac7ee60da17d9e3a2b96c73577f2bdd0cb6f2e20dc
SSDEEP 768:/8URU8D/Lw7YGE7fdxY9XQtflJavDW4rD0aqSjj3i5Zm02fFjot63l11gqCmImDT:KWsNAdxttAosfu63jIV/RPyjxlRn
MD5 SHA1 SHA512 SSDEEP

beregningseksempler.elv

SHA256 e052ca62cf4ab4fc44e3db2749c197a1b57e86fde8bf215c55c427e223574ade
MD5 d078691c54658d77d4606b4959a09e18
SHA1 0a88d67ecdbd502fa0f5bd40e745be2b239f06a5
SHA512 af2367557d1f98ba5cb0ea8384b3e26e10709d038d4f9eaef04b6ed7a3da52e080aaf4d134a378ed599ace14bbb2723223b1eced6d440e84de9d37c5fd3758af
SSDEEP 24:yywic1gUAVbpr1kSgu/9xKRsL5H+Qyo0la9R5W/FCGKVf:Pwi1NpGSgu/fKRo9IEhKzO
MD5 SHA1 SHA512 SSDEEP

nonvector.kag

SHA256 108cb93cc475857f9c5fa481c21bdbc671a2191d3fc42a2720b63fa68578a5f0
MD5 8a6e77ad0fef914d4fbfbcd4ce156afc
SHA1 bfbb0cd8fcd2e76acc1629b02cf3fdf8290c0fcc
SHA512 fb0e5667d7ccfed7206df0379e34d082d78ef56615108da92e63e1321373cd2caf434f2f8634ce11a5b570b7600781a387ebf6bab6d90c857c57262caaa7ac3a
SSDEEP 384:LHiYJ35MU7fNYepKXUnaCyyNDpk58OMpo1XL9pIGmt:LF7FY1E/NDmqOMOkt
MD5 SHA1 SHA512 SSDEEP

riebeckite.uns

SHA256 c74c06ae40a858236103a03adfab509cfee62ddda1e607db8908aef4711a3047
MD5 eeb25cf3ab78af4effb980566e199a80
SHA1 175ddc9c8ce2b3b0a4a4c8c3f7b67d4e49a479c8
SHA512 de88f732d42bd83fe137437c43a4603e255bd84c4be1126b1b6010ddb406936dd549a7cb2c431a5959da28034e1014ca96af8d203035a533a82e98bc34b1fcb6
SSDEEP 48:9GzCTTuM+L3/PgIJdPK8Oa/UkfWGNeZeDZFaGA7EvH9MnfMIVrSA06uE:9G3L3JP7Oa/1lZNs74Mn3V+ku
MD5 SHA1 SHA512 SSDEEP

c4e9719f719092bcb6dac7893d6e3601a32ff93a9ff5d51ba55af82cebd902f5.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Andrine187.ser

Consumptional/teparies.txt

Fladser.Srg

Raasejlenes106.app

abaxile.Dag

beregningseksempler.elv

nonvector.kag

riebeckite.uns

Sharing

General

Malware Config

Signatures

File Explorer

c4e9719f719092bcb6dac7893d6e3601a32ff93a9ff5d51ba55af82cebd902f5.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Andrine187.ser

Consumptional/teparies.txt

Fladser.Srg

Raasejlenes106.app

abaxile.Dag

beregningseksempler.elv

nonvector.kag

riebeckite.uns