Facturas Pagadas al VencimientoPDF[.]exe

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsExec.dll

Facturas Pagadas al VencimientoPDF.exe

IMPHASH 176ce6397deb91dca8c8158bf86c99a0
SHA256 5c698ae442a9eb13401817b158b8a20f8bf5fe12d38cd7ef1e809ce9cb7a2805
MD5 206b78f35e7fbe70a015c9b809c0eb23
SHA1 4a87e53dc1a570d084e56db622ff95b7d4c421aa
SHA512 126d31a82306d88d34b973e3dc3393abfc186fc4ea0cc0e59a7330b001062be3e21659c5a0f8cb42d57910ee5794567e60dc06d024cdcf1cb380b46f0f4b561f
SSDEEP 6144:/5hnQ8LgUpJafP6zk1R6yUoXlL2yVImOY8K8JeHFxxmbzjx1+:/DZgzH5Rgo1aaImOYb8JkFxxkfxU
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

4a:60:6e:96:32:78:e2:49:f8:b2:20:9d:0d:ef:c6:e2:60:d2:40:d8:60:0c:9d:bb:dd:7f:18:65:61:1d:22:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Croucher,OU=Lynlaasen Slagsbroderen\ ,O=Croucher,L=Johnstown,ST=England,C=GB,1.2.840.113549.1.9.1=#0c184e756d69736d61746973747340506f70776565642e646566

Chains

May 28, 2024

PE Signature issue

Digest

a2:b2:61:b0:48:d2:b5:d2:5d:20:90:b3:91:c8:91:2f:37:cf:26:91

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Croucher,OU=Lynlaasen Slagsbroderen\ ,O=Croucher,L=Johnstown,ST=England,C=GB,1.2.840.113549.1.9.1=#0c184e756d69736d61746973747340506f70776565642e646566

Chains

May 23, 2024

Subject

CN=Croucher,OU=Lynlaasen Slagsbroderen\ ,O=Croucher,L=Johnstown,ST=England,C=GB,1.2.840.113549.1.9.1=#0c184e756d69736d61746973747340506f70776565642e646566

Serial Number

12:37:96:8d:35:f1:91:20:ee:ad:85:8a:e4:db:53:1b:ce:71:31:3d

Issuer

CN=Croucher,OU=Lynlaasen Slagsbroderen\ ,O=Croucher,L=Johnstown,ST=England,C=GB,1.2.840.113549.1.9.1=#0c184e756d69736d61746973747340506f70776565642e646566

Timespan

Sep 5, 2023 - Sep 4, 2026

Subject

CN=Croucher,OU=Lynlaasen Slagsbroderen\ ,O=Croucher,L=Johnstown,ST=England,C=GB,1.2.840.113549.1.9.1=#0c184e756d69736d61746973747340506f70776565642e646566

Serial Number

12:37:96:8d:35:f1:91:20:ee:ad:85:8a:e4:db:53:1b:ce:71:31:3d

Issuer

CN=Croucher,OU=Lynlaasen Slagsbroderen\ ,O=Croucher,L=Johnstown,ST=England,C=GB,1.2.840.113549.1.9.1=#0c184e756d69736d61746973747340506f70776565642e646566

Timespan

Sep 5, 2023 - Sep 4, 2026

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

14377

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

ShellExecuteExW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderLocation

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW PeekMessageW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

WriteFile GetLastError WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode CreateProcessW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize CreateFileW MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW GetTempPathW

$PLUGINSDIR/System.dll

IMPHASH 4f33ea844b96a31c8f4690530ba63854
SHA256 1624d9ad8b2e2658af224691263f64388ba3a997efe80011889e3c35237ce4c1
MD5 6c38da8922cc37b4bbb77de4a63ad843
SHA1 4e0533fd11df8bddbd543ed58df7b6060d9f4631
SHA512 ad0be3d7e57da9c304e9b9cac5341b6c76b157456ab44f5579d6c38c830a31c9c3e1e9a875b8f465243c607ea2ede6b0bb77237f17a70a4d4c78606e036c3430
SSDEEP 192:wA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6gn9Mw:QR7SrtTv53tdtTgwF4SQbGPX36g9Mw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 9f4228b95ba1827b2dc7f6da088b955c
SHA256 99fc8f647bfff3655dcd4ec577d79ec4102fb3a68b567282ba0b51e0b5262802
MD5 052099395689171cf64bf4a868e6a9be
SHA1 9581e80b223226eee5f726f38b3e966fdc5bbfad
SHA512 f45e38314e10129d3cceaefa918b25a432c67db8bf73f110a6957ca7f5cc96db749601fed550e0357bf67c84de2721d9692b8785c295fc7a1537b42c68b461a9
SSDEEP 96:rVl/7KOuFlKHMpXGu8FX6eT3sQk1u2QmIGjbAQvL7hDAbUlV:rVl+hSs2u85TTHkZQmbbLL7hDMo
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4370

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Weatherologist/Imboscata.Del

SHA256 b8998051681e9b93aebcc79dc99c05eaf8bab676884d5897d4ffaffbfde4a5f1
MD5 fa2a475d73806ce9f1566870584e7c88
SHA1 0c8df8aaef43642437656c3750ac895be0203b3c
SHA512 c28a7c88f369e4cbb1885de219e92d0d4e1dce0d521572bb17861c8c8850ae8e35861c4d05a75c39063c4a7f60728f6ce10dc1b3d5bd8ed42b195421ce4cc80a
SSDEEP 1536:GyzOP5/V84qe5R4jKC4e+vIj7ipS9nDqc:A5349z
MD5 SHA1 SHA512 SSDEEP

Weatherologist/Region.Pra

SHA256 caf930b141a2e6643984477f50f78fc14d867c867647876adefbb8d975000523
MD5 ff1ad264e95f9bd34487f50a39199b89
SHA1 440df945a2883cd83f35f4e208f8d7971113509e
SHA512 e537babac9f7230722e1f07cd690e6275edaedb9a7cdbfb996636b41859ced07df54124a727ea490dab6ae1f6500e95a5967c02a23130ea1ae6199ef73d11de6
SSDEEP 3072:/N+AOHH44O/+g8tjhLwKACt68Cn9J2E7X/x+UapUBDG76P5ZtTVj224cUbLjKWVc:4HY4C+gQjhkKbM2wX/x+JpUo76P5ZtTF
MD5 SHA1 SHA512 SSDEEP

Weatherologist/counterpendent.dis

SHA256 e9b088a814b04d53f24de4bd31cda900d05e6a7d43c47b5541e4617b0a407d53
MD5 6aca0c00a7bac95fc3a67e48f6ac489e
SHA1 9804285b742c0a26e46328fa88b69e42c4b23978
SHA512 41179d52e0b6ffca260aac866cf696b9f10f60f8fd8f85aef5d7b7309536af383f3eb06eeb570d601febded78807987e0165a20e288a28ab04e6b4b89abed1d7
SSDEEP 768:pn3oNc3YiRuyEVOtlHgGpKlSrqZEBbEBs4zKN1GKyKkVsMwCM:5n
MD5 SHA1 SHA512 SSDEEP

Weatherologist/sammenkoble.bet

SHA256 326aa9a2f644104a3f5e4260f456ffc00f2a0702cf08a84b2bee2822a2d3de2a
MD5 c872abd97249caf01f945541e32b7cb8
SHA1 6861a11117a69d5a6e5b610e06e4615e619cf64b
SHA512 07462bedb62412efbc3f980a8cc1afcc4730fb860b0efeca87eee3a669be91500b3f3080c06fc38a94875c4ca47d8d3b8e813ac473685ae8eacaab09a7efbfa8
SSDEEP 768:P5ALI1LRm60+qd11Og9WPcsaqhX2r9o7t4O7O1nQrUH8e0:0z
MD5 SHA1 SHA512 SSDEEP

Weatherologist/slemmeste.emi

SHA256 d5cf9b9c6bcc33504285ae86456952f10c985291d046e7efbbad1b8feff29af4
MD5 7121d343d88414cb0d4524c0a2be4d2c
SHA1 7af4e7b7203db82a6e3c2e204682c75e1e328bf0
SHA512 47d91429da5a1be535f9830d83519b36a9fec9b157f04323a3c9f297ceee10fef45c24c65a748fa5ef082b33b9cb7de0a5528815e5931fead594c250d7085523
SSDEEP 384:RvdLtPB6bz0plyK6jqcNytmN8ccjvH3VKhLo6FrjgokOhWsj+qEVIkMgWgYCS6J1:3L6ovXSra/WrQ30K566PHdj5qtb
MD5 SHA1 SHA512 SSDEEP

Weatherologist/tyristorer.txt

SHA256 59d230dbb012f822802a2601deb52d884ebea1f3b943f700b0842b8f6114a5fc
MD5 5ce362af707ab2c1468935543ed40e9e
SHA1 15c50e0dc7bf3085ce200d879c40227ecc907aa2
SHA512 2caab8aa71c82b5291798ef01f42e8d823553ada170a3a47624a3db06a34ea2cea5ef3d9adcdcf8c683aa401a6df1a46b35fad1f67f843b32f99eb716deae271
MD5 SHA1 SHA512