26756d0ead80952a3869b7e7a08a35079527cf0b8486f042b31e51e9a1e9e40a[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

26756d0ead80952a3869b7e7a08a35079527cf0b8486f042b31e51e9a1e9e40a.exe

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 26756d0ead80952a3869b7e7a08a35079527cf0b8486f042b31e51e9a1e9e40a
MD5 69fc7b234d842e87ece02e2ed560de7e
SHA1 95aae63ebbed6e7fd5b14420e478e8fcce4f2504
SHA512 ea0eb82df443a668ddeee9c926c1048a455c833f61fe38f1a2fe34d3990c88e8de393b1bcc2364ace005a5fdafe3d06df48d41289a479b548432ac437f4f4d14
SSDEEP 12288:lwTbzi3YbfM8xlEOvCCi9Cqdh2us5I+cicHv5BNgGOd:lwTbzzbf3xCOOMqX2uNicPfJO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

94:08:69:8f:8d:0d:e2:cb:b2:b3:02:43:ca:3c:a5:f6:58:1c:4b:12:40:73:ed:18:91:e2:38:5a:85:49:cf:bc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Generationssprog,OU=Tyksakkernes Mongibel Tordenprdikeners\ ,O=Generationssprog,L=Beurey,ST=Grand Est,C=FR,1.2.840.113549.1.9.1=#0c19426573636f7263686564405375626d65746572696e672e4c65

Chains

Jun 4, 2024

PE Signature issue

Digest

14:bc:d9:e9:1f:ac:3b:07:4a:87:5c:74:0a:da:26:4f:9a:11:53:6b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Generationssprog,OU=Tyksakkernes Mongibel Tordenprdikeners\ ,O=Generationssprog,L=Beurey,ST=Grand Est,C=FR,1.2.840.113549.1.9.1=#0c19426573636f7263686564405375626d65746572696e672e4c65

Chains

Jun 4, 2024

Minor OS version

0

Major OS version

4

Entry point

13477

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Jordledninger76.Fri

SHA256 1e003c72f1a7e90f96bcafa59fe54b58629f15f08d8b2d6f47694475e4089665
MD5 7f08099067e81578bc1ea41f38b9a4bf
SHA1 d7f6b3dd59bb29c8846b5548342195727c176c43
SHA512 8a0bfb93f219770b5f95598ffc9121cae28b6ca348309c1ff01a352c83eb780576dc0cad2c900f11448f84d7d5b6c5797cb4bcc7f170fc26f34a398255c9430d
SSDEEP 6144:wHIxO1LamTOulivLskQpKQdQq869iHZvEWSYSUmUWIhwib:woxMRTOuAjsVfxIZJSkm2Nb
MD5 SHA1 SHA512 SSDEEP

Udbyttebelb80.sta

SHA256 fd53097c756a28f183581c5a8a852ac665974bc8ac4ef4d8db9211a51b1c5679
MD5 89a8904d80ba32bf204fb9446dc2cf09
SHA1 a0d9dce5321aaed4a7a36e831936c82561cce36b
SHA512 7015770e324cb3b273d04cda4046dcf84f466f46ac8edb6c4f9d7d9f80edf18cc24cdbcee13a0311f30b50e185878190ea4e30a6087dc15c6e7de58ca77f9c39
SSDEEP 768:MDKF61TqWvkSul8+l6rjRbXvVg6wyVELGRk24S7euAnEhj7Q4SsV1p84pkN+r/sx:WH8SBW
MD5 SHA1 SHA512 SSDEEP

Weightlessness.all

SHA256 32b8f8571b415300b3d772176575b355e17f81c4c1f7f0b2ee81b3ffdc64067e
MD5 49bbe960f32d253a8f265733a09bb7fc
SHA1 1d972f8bb311c866a0352a415f14d4a380aed06a
SHA512 71977febb0b7e94c8dfabb517d4a535e3be36aaa4b655ee88faac3194bf50dc590892765341e539f588d8324445ce674f95c014eb4edfbac7928325799e249da
SSDEEP 768:thwCUJjLJr8uKIjT/9rg6ymqjPCphoMbq9TLLODk5c9O93evOtz2rvuQy4LBH8Wn:tI35nzqPmmJquc9FOMvuQ8y3
MD5 SHA1 SHA512 SSDEEP

databutikker.sek

SHA256 6d24383cbbe1cd7d2a992e8ef96b543278584e621bbf3c0bf9f2d86eb96a24b7
MD5 11433e83a250fb726433c7499935e82b
SHA1 f5c6ee9333326752159964ee71ba7db9792a09c8
SHA512 5aeceab882a47a995e0177aca0af570794c5781d11bde6d763640aca19b53931c1422cfa751b442c3da40510f1a8f0afd8fb8a62673b8f4349f4fc08817ed551
SSDEEP 768:/hBQT4BjqF9RWV9ZkyergGTnnKmF5Gqvx9meArdT1apiWIzPsBdtAXX6L920PlV1:4oMoe7e6AdMdON
MD5 SHA1 SHA512 SSDEEP

eiresione.txt

SHA256 11d5d74e5863f0dc1b0ac9a78e54589b45ecac5fbb7ac2df65b4a3b4ace7b2cf
MD5 e31046c50afdbbb0127f88e39456520f
SHA1 0d440f58dd07b6e88ffd709798f043d2cdce6e90
SHA512 0e12cccf6683ef90239f707cee525437ccbbd7ae88de85f2996c5d0324de96ee9c3eb2632843e4b35894d8e8dd5f8cdf40bc7bdd2746e38d48b87072c4096c49
MD5 SHA1 SHA512

skibsliste.lit

SHA256 d1594cbed02074e5fd69016f44dd9772edd3dd8a320166103f4cc8139c49372c
MD5 700e8e6cae06f943e1eaae5205bf1f65
SHA1 b3d2a7a22a75128f8eb4cb94a7962215517033ca
SHA512 38079f0d1f01876ca0e13a9d462c126e16ea94986d932da4bda9a7d109c32f2895238787db869a30073051d2bfe6d15a0eee434e20cf533a11b8a7ccdbfcbca3
SSDEEP 768:FdME6bW16O08Wy5YI8tHSFI/HOTLK1HFCoSwMO2n5Vc6q14cqvpQZ7I7ntWdHQDQ:o8fj7q7f
MD5 SHA1 SHA512 SSDEEP

26756d0ead80952a3869b7e7a08a35079527cf0b8486f042b31e51e9a1e9e40a.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Jordledninger76.Fri

Udbyttebelb80.sta

Weightlessness.all

databutikker.sek

eiresione.txt

skibsliste.lit

Sharing

General

Malware Config

Signatures

File Explorer

26756d0ead80952a3869b7e7a08a35079527cf0b8486f042b31e51e9a1e9e40a.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Jordledninger76.Fri

Udbyttebelb80.sta

Weightlessness.all

databutikker.sek

eiresione.txt

skibsliste.lit