სატრანსპორტო ინვოისი- შპს ელ +DE-GE 400 EUR[.]exe

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

სატრანსპორტო ინვოისი- შპს ელ +DE-GE 400 EUR.exe

IMPHASH d4b94e8ee3f620a89d114b9da4b31873
SHA256 6e1d980c6302e6c39dfb64c69f8dfc056f4eea385ff865753b41d250d815f4d3
MD5 bd3614fa7678ce0afd0d771ac9cccda3
SHA1 1edcc5e14ae650fee8c7aff90f9d83ab842d9a80
SHA512 db990f88902238ac945c66ed9e354ca5290f7afc32ff547f2d8a6b298c0e52dab8189b43291ab20ee28efc2f9e7572f2034dbf8a5d09a021b1ed321e23d5b27d
SSDEEP 12288:c5GdGIdeORq3eur2KKeC/hX6uSog1HzdC5FrYzBDaeLq0zqwnNyBZbV:F9rg3v2Ke/hHSogZdC5FCfjJngjbV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

25:72:cd:52:52:86:c6:6c:10:8a:79:88:c6:b1:93:30:d0:d1:48:bf:08:3b:0d:f7:f1:a3:99:96:88:0a:c8:27

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

OU=Derationalisation landbrugsbygningerne Funktionpdr\ ,O=Superofficiousness,L=Saint-Pantaléon-de-Larche,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1344756473404f7264666f72736b656c2e436f72

Chains

Sep 8, 2023

PE Signature issue

Digest

33:75:b9:52:18:af:53:0a:7b:eb:44:29:77:68:5a:f2:5c:77:a5:38

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

OU=Derationalisation landbrugsbygningerne Funktionpdr\ ,O=Superofficiousness,L=Saint-Pantaléon-de-Larche,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1344756473404f7264666f72736b656c2e436f72

Chains

May 23, 2024

Subject

OU=Derationalisation landbrugsbygningerne Funktionpdr\ ,O=Superofficiousness,L=Saint-Pantaléon-de-Larche,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1344756473404f7264666f72736b656c2e436f72

Serial Number

4d:d0:a5:59:13:72:8e:b7:47:50:71:da:1a:46:4e:57:23:83:11:f1

Issuer

OU=Derationalisation landbrugsbygningerne Funktionpdr\ ,O=Superofficiousness,L=Saint-Pantaléon-de-Larche,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1344756473404f7264666f72736b656c2e436f72

Timespan

Feb 11, 2023 - Feb 10, 2026

Subject

OU=Derationalisation landbrugsbygningerne Funktionpdr\ ,O=Superofficiousness,L=Saint-Pantaléon-de-Larche,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1344756473404f7264666f72736b656c2e436f72

Serial Number

4d:d0:a5:59:13:72:8e:b7:47:50:71:da:1a:46:4e:57:23:83:11:f1

Issuer

OU=Derationalisation landbrugsbygningerne Funktionpdr\ ,O=Superofficiousness,L=Saint-Pantaléon-de-Larche,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1344756473404f7264666f72736b656c2e436f72

Timespan

Feb 11, 2023 - Feb 10, 2026

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW LoadLibraryW GetProcAddress GetModuleHandleA ExpandEnvironmentStringsW GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle GlobalFree lstrcmpW GlobalAlloc WaitForSingleObject GlobalUnlock GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW GetDC SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow LoadImageW SetWindowLongW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint SetTimer FindWindowExW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/LangDLL.dll

IMPHASH 3e8d18bb71c7ebbda2ddc2a4bb03547b
SHA256 01773690efda3c1fa609287f4bf2277f3d366fe4a1ddc099d2949fab54f0fbd4
MD5 be828e6e1885cc5a25e18f123e2a76a0
SHA1 96432bf2da4e1c454f49f76e20855f27c2fce2f9
SHA512 983e9a9e941b162031b8acf372c3ec12180b54f8e5f7172a6e87599e127170240841889d6e346a730f4970c9079f5f9cededc2730f910eb4e0bb897f68cfca70
SSDEEP 48:S46+/ITKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8m/ofjLl:zKuPbOBtWZBV8jAWiAJCdv2CmCL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 e94a1f7bcd7e0d532b660d0af468eb3321536c3efdca265e61f9ec174b1aef27
MD5 ee260c45e97b62a5e42f17460d406068
SHA1 df35f6300a03c4d3d3bd69752574426296b78695
SHA512 a98f350d17c9057f33e5847462a87d59cbf2aaeda7f6299b0d49bb455e484ce4660c12d2eb8c4a0d21df523e729222bbd6c820bf25b081bc7478152515b414b3
SSDEEP 192:eF24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol9Sl:h8QIl975eXqlWBrz7YLOl9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cryptocarya/Culpose/Tyttebrsyltetj/Kragers184/Latecomer.Pre

SHA256 f4ffbafa3495c8e261d98dcf3279b5cb479ba51e66af2ebda6aba5c2a72e7a01
MD5 40e99c67206defb48cc31f330659d15b
SHA1 f1d5106738243455b3b2be6e0078783bf602a60b
SHA512 ee6fa37ae35bc024061d2dbe91231d935f858c615eca84d9374d267f5bb880c0e8b85696fee975f0403f146dcd9352424e747445384c7b7d451545ae8268039d
SSDEEP 768:LG7uIE+A7HZ2VZGnZ6buq4PEYF2vW/ya6D0g4aXJubq/MpsQ:MA1ImZ/XPvnD6oOQ
MD5 SHA1 SHA512 SSDEEP

Cryptocarya/Culpose/Tyttebrsyltetj/Kragers184/paahldes.cel

SHA256 dfe1988d9e38188c5a18bc6373dbb7966ada6e59c02349989ec22c68f9ef9df7
MD5 673a4aee01ecd9dc4442da19e0ec000e
SHA1 f577c593e5f9e433cb0fd70a155ac18997562dba
SHA512 c01993f31996735a38a1e6901cfdc5850badab2b390469da413408def6362f21bfceb9cc9d3349a096a23c204fb6703571e114c1819a17fad0a4aaa536e59547
SSDEEP 768:dWBqwscTw1TziplxBZM+9Szvb9RPw03QYmqcrJTrJKVioiOkauS:2p/e4lxBCPvjR3QvBrhJKA15S
MD5 SHA1 SHA512 SSDEEP

Differensrkkers.Cad

SHA256 2064604908b14efbbf28df2abfe7e7fe8888864b4feb030fdc88c4631bd13450
MD5 b7b7ba885f22cc92d98f7fb7e140c715
SHA1 724c16cec5656f61bca9df93936904c8db111058
SHA512 56ae25f15ed32f9a966bec430dba9617eaa8e3414d77df0e407aa8ea02d269671cf9ce9a0605b49fbddc37a54f1c272ae44f7f47c9fa0d0ce073c5f38e88e1c7
SSDEEP 6144:LCEXfEEdeDk2PWgsmw8z3sJKOH/lekM74zFZ+BCwGE:LrXfEEGk2u1LKOtJJwGE
MD5 SHA1 SHA512 SSDEEP

Laurvikite.ben

SHA256 16fb3e6f85c5672170fe1ce5bfd3a3ec7abbeb6a7fd7db51ce346e8f0283e3ab
MD5 7ba83987e63c3c7ee692ced9dae33e14
SHA1 facb350ce024414994eff794e0baff4a60c4a663
SHA512 d38bc63bf5565954655cc579d7d8bb79f1a24d294ff4f68ef808d124d524679a13756bfa2b105c8d9349b38f6f49f0ce79d7b03048cafa37a80cf592e557e8e7
SSDEEP 1536:1bMgxC5iXvLQni5j90Dcr37SjZNoUVmxtQIKBwL0lZ2l+t:V1C5wMnPNNoOKtRKBwLqpt
MD5 SHA1 SHA512 SSDEEP

Raadlsestes/upswung/Debagged179/Klatpapirer/tingfstede.sub

SHA256 97d9b0cf9fad8b59d7112ce68b16a821f8cd0e7f10fa8f52a8f9bb27edb2fb51
MD5 470ef14d1a43eb7ca1542072e4e722b0
SHA1 b6e61501da811145311e8fbc8b20b997b3498ad9
SHA512 8a4d90c12c301502a6161167b122e80283ada0710cc5d42164698f9ac5fbab6cb102e01601f75541d315ff25a27f0d6c5182a2e3144b212edc1504674535a6c0
SSDEEP 1536:wgPWwWaeIiq6ZQK2fcATTicRCtou/yaRsF:w4ZaLQK2fimEocnsF
MD5 SHA1 SHA512 SSDEEP