Vendor Data Requirements·pdf[.]exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Vendor Data Requirements·pdf.exe

IMPHASH f10e4da994053bf80c20cee985b32e29
SHA256 a03913b0dcf4d9707eb9c74d69b522927e760e9be55effb0e14ebbbaad9177c7
MD5 f1043033237fa935ef9af72415e657a1
SHA1 b1ce2973b99811fe469ae6b4c450e97d4d4f4a20
SHA512 1f4971262c297f2fa58234d7787ea384a168633eadce39e9334d9e7f5e5924b40eb47b84cc83ec8c29c62212863f17340a5525007d25f721c900e5583cf8dd3b
SSDEEP 6144:FM23AboMfTvNXDQV1yKE2C7qNIZX8il32bcHXgjv3bO43f1WYq6cVjWZSlhhEV:nGoGNzQ+DZX8M2bc3Av3bO43tW5WZl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

15:f4:05:6c:09:e8:c1:ce:0d:29:80:82:f6:25:2d:c1:80:fe:fa:72:a9:87:27:86:9f:33:05:1c:8d:b9:23:e6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=hamber,OU=Scalograms Juvelbelgnings\ ,O=hamber,L=Shanks,ST=West Virginia,C=US,1.2.840.113549.1.9.1=#0c1a486169726c6573736e6573734046616e6567616461732e537072

Chains

Jul 7, 2024

Minor OS version

0

Major OS version

4

Entry point

13516

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExA RegEnumKeyA RegQueryValueExA RegSetValueExA RegCloseKey RegDeleteValueA RegDeleteKeyA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken SetFileSecurityA RegOpenKeyExA RegEnumValueA

shell32

SHGetFileInfoA SHFileOperationA SHGetPathFromIDListA ShellExecuteExA SHGetSpecialFolderLocation SHBrowseForFolderA

ole32

IIDFromString OleInitialize OleUninitialize CoCreateInstance CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

SetClipboardData CharPrevA CallWindowProcA PeekMessageA DispatchMessageA MessageBoxIndirectA GetDlgItemTextA SetDlgItemTextA GetSystemMetrics CreatePopupMenu AppendMenuA TrackPopupMenu FillRect EmptyClipboard LoadCursorA GetMessagePos CheckDlgButton SetWindowPos SetCursor GetSysColor SetClassLongA GetWindowLongA IsWindowEnabled GetWindowRect GetSystemMenu EnableMenuItem RegisterClassA ScreenToClient EndDialog GetClassInfoA SystemParametersInfoA CreateWindowExA ExitWindowsEx DialogBoxParamA CharNextA SetTimer DestroyWindow CreateDialogParamA SetForegroundWindow SetWindowTextA PostQuitMessage SendMessageTimeoutA ShowWindow wsprintfA GetDlgItem FindWindowExA IsWindow GetDC SetWindowLongA LoadImageA InvalidateRect ReleaseDC EnableWindow BeginPaint SendMessageA DefWindowProcA DrawTextA GetClientRect EndPaint IsWindowVisible CloseClipboard OpenClipboard

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectA CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetProcAddress GetSystemDirectoryA WideCharToMultiByte MoveFileExA GetTempFileNameA RemoveDirectoryA WriteFile CreateDirectoryA GetLastError CreateProcessA GlobalLock GlobalUnlock CreateThread lstrcpynA SetErrorMode GetDiskFreeSpaceA lstrlenA GetCommandLineA GetVersionExA GetWindowsDirectoryA SetEnvironmentVariableA GetTempPathA CopyFileA GetCurrentProcess ExitProcess GetModuleFileNameA GetFileSize ReadFile GetTickCount Sleep CreateFileA GetFileAttributesA SetCurrentDirectoryA SetFileAttributesA GetFullPathNameA GetShortPathNameA MoveFileA CompareFileTime SetFileTime SearchPathA lstrcmpiA lstrcmpA CloseHandle GlobalFree GlobalAlloc ExpandEnvironmentStringsA LoadLibraryExA FreeLibrary lstrcpyA lstrcatA FindClose MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA SetFilePointer GetModuleHandleA FindNextFileA FindFirstFileA DeleteFileA MulDiv

Premortuary.heb

SHA256 9cc00b168811b2c693e1c1bf0e4d3ad8bfbf096c2ba46498fc8ebeb41f000f2c
MD5 f8137c5be37907a167f6bf954b5fd08a
SHA1 877b8fcabb756709668756553868e874a00640ec
SHA512 1c7e1435600f97471a4ca07836d159679e22eed5c6adc13adf2d30e653bc511a2f7d821f3ca9a9dd5a8504537822245fad9d9176d2f286470eea22417f62b747
SSDEEP 192:6NXEMRI9UvAdlhun7V6wTnU80bR67KX8sq7zEz8B33eGNumvPPYnjkZ515:6xI9XUnJVnU80bRcV/zfB33/gmw65
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skyldsttendes.Und

SHA256 caceb5002866580c07883f8fddb62a82d7fadd1e8ca7a2eb4e11240dfda94d79
MD5 be381f7baf52513e52dfed9361a6dc69
SHA1 a6cdb30ea1a85a42404e6e2fd29c8d5cc6ad251a
SHA512 c076aa00785538010dcc9df6aaba0f8af5f130b7edc800fca31da4fff9ee11fa728ba5c78c89047494b0536878d8b32d3f05f43177dacf0416726b02af814c8a
SSDEEP 6144:V0DYuJ0nuP2HxDvwzqER3oOY1UBbnzN4gfvc5dEQwphiqKM0kTyK/j:V0rwuPwIzqApv5zN4gfq6wqWkTySj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Svejsebrnder/turjite.pro

SHA256 7601cbd8ef98c5a5bd267ade4a13b19a80b80976d81ca963bdeb1c83751f666b
MD5 4901d55c36deb346b1a7e46910abac62
SHA1 23dd06e1dc344dce092c6d8bd23955f2d49b1059
SHA512 33c9143c948f45fc7ffaff66deb670b69490230562f04295fbc64e82092cf13e81915d7b6cfaab0b06cb374d1e70f817377292af781492bea991e6d11ce6d95e
MD5 SHA1 SHA512

NSIS installer

installer

Svejsebrnder/undersalgs.txt

SHA256 9338a3176e634e9c3580ca438f78286ba8f5082b22dc9486100fbafd6c41b533
MD5 555962e697c9ef57192cc17dae39a2e0
SHA1 59ae5860198b6073560081154b78ccbfe18e846f
SHA512 984ed8089e8434c7ba7f4934f4d462c5b8440f4a72db5c397470b76cc500244810c292a8dd4031937fe18bcaa1d469a8b402048223fb0cf4fa0a16e331748ea9
MD5 SHA1 SHA512

NSIS installer

installer

burgerbars.squ

SHA256 130ee1819a1a2a076b9c46f615c39353101e1756926af670154eb9409f3e651c
MD5 3520e755ee1e698a2ce78a28c3dc2a99
SHA1 d1437dced86d8328202ecc8966304eb55797b7ec
SHA512 d87e29cb5e2064af13db2db5965423aae2197782e22f4b0140bdcd4d388367a2ed1037b89f32b803fa5a1d98e7afade009f7b75930970fb20d2784c71cf64696
SSDEEP 192:/Pb4QU2rrgePBbV6CfS++wB+uhCXiNwYYmDz:sQnrl9V6OqwB+QCXiCYYwz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

delysten.imp

SHA256 5339721e47b9ac3dfb81b6d81593e9792c57573541918c0d5ca327128aa4345c
MD5 8172795f7c8cfb7cc597e879d2b0b468
SHA1 811797a9309a1bc3429f3bc7735eb6af1a7c80dc
SHA512 9718f72091367ed6a02598295a9f35512c6ddb31e3dae9b685060e613c942c755d90418cb4ea31e4bf7ea8967ce34c9356bbf53fafe08a31d851afddd55d7322
SSDEEP 1536:1xDq89nMBBQO6UQElMsiruOtDhlAHBU51N:1xlmBQ9UdMsiiOtVlAhUJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

hatchback.jug

SHA256 6592c498eee3b188a8710a98b04b2b9bd747b31751610497302263d50529c44d
MD5 08a5afd573c778bd2c7014a26382b13e
SHA1 4e9e38a517b62b2652b7efa846d42b5af488d49f
SHA512 a286000cabd1f57d50c570977c023d286c81470905c21c6b6027fdb258971e4dd46fee28b3550ec9df2244d1541ac31ecb06d1639fbc338d496ec099a8c07709
SSDEEP 192:jS+u/5/1UOh2+13N46eABQqlea51Zlhivyuc0tb0OlNJYHY3Zf8s:jRS5ys1G6eAmqBhAPfWOWY3Zf8s
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

kitin.bla

SHA256 3734ea4c9a3851e086be8f05c02dca695d0aa06d0e78a700db3df0e75c8f70f8
MD5 1cd36138558d012427b13738359203d8
SHA1 1f46abe30664b2813fec3a12a7eef8cc5cfaaba4
SHA512 f02d0344b2bc21e82239864239835fd6030558024a33abcfe2c62eb954ad7cb021c907f609506b4d7637a7f5e86bff4e84360883a7defd3bfdc2958f0f126829
SSDEEP 192:B0y5JKsu/Fkhw8yi3qepyL2s/tSvDWuyHGMLlCC+L:mkJKsu/FR8Zb6XFSLAGMBW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

larunda.pho

SHA256 cd30979142bf3d1efd212aba55dbd6a42dcbe44cdd85092b014efb1daaf864a6
MD5 860014be708cc3f30ea875d9548af2f8
SHA1 c04f16c9b9683c431dad64bd4da639f6edc62859
SHA512 4cacd7e70889d191c2944d2d71d7fd4f84b3fcc6e86fef964d823ae4485513649ef9b5f9d7aed38b2b567c3fb3e37a68ac44ae23799515d82aa645b1d80f19b6
SSDEEP 96:zQ2msOD/p1/s3FQrZgVaDCFBkVPXSd+ByK:z3mtRVs0SaDCFOVPCe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer