b288a3c462ac2ab4d11ee6929a8fe8e242ee9beb60030d54b9c3fa29a0ad153c

resource
b288a3c462ac2ab4d11ee6929a8fe8e242ee9beb60030d54b9c3fa29a0ad153c
unpack001/$PLUGINSDIR/BgImage.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
SHA256 b288a3c462ac2ab4d11ee6929a8fe8e242ee9beb60030d54b9c3fa29a0ad153c
MD5 8ec5759d71b1e9019cc3611bb994fc31
SHA1 79e582670c8c1b26c4114f3f9c2f007a85971152
SHA512 1fbbe93e4fd1faa2f953667bb8c1fef7c7794ce6de04bdd74c11f3a0625267107c91948aa79cc80c3ea38718249dc8ca2e4f4c7047db7fd56d67d15d5bf7a791
SSDEEP 6144:GpkXGhIfigEMBI8Eh9xlgWAGWgPikKNxZh2TZ0UZjtYhA8vifv/w:/9KgEMUlgoZiVkxxOhA8aI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW WaitForSingleObject CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GlobalUnlock lstrcpynW GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/BgImage.dll

IMPHASH 32b0f5880a0efd258c6be2f7a14f4a9f
SHA256 8eb85584031b2e1d74daf372e60a72f767e8861db9d4ca2dc1981511f620e51e
MD5 744f9c42403e9aabde8fc65d40bccd3e
SHA1 9ab49924ffa1560e5e3b70b097236a1451945829
SHA512 924cacc1d1dd5260b6adf081bf1bfc83edaf51546af7e2f644ab53152e25889552fc99c50ddc45dc1850d7c165877637df11cd35709a49d57e6201b6f4690244
SSDEEP 96:8ewk1LFJaO1/radJEaYtv1Zs4lkL8y3A2EN8Cmy3uTu4j7J3kWyy/:tLTJa2roqJyA2EN8diuTfje
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7202

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc
MD5 a4dd044bcd94e9b3370ccf095b31f896
SHA1 17c78201323ab2095bc53184aa8267c9187d5173
SHA512 87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a
SSDEEP 192:em24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlESl:m8QIl975eXqlWBrz7YLOlE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH e2ee55bddad4241d619d6a8a38e2d869
SHA256 067c77d51df034b4a614f83803140fbf4cd2f8684b88ea8c8acdf163edad085a
MD5 0d45588070cf728359055f776af16ec4
SHA1 c4375ceb2883dee74632e81addbfa4e8b0c6d84a
SHA512 751ebf4c43f100b41f799d0fbf8db118ea8751df029c1f4c4b0daeb0fef200ddf2e41c1c9c55c2dc94f2c841cf6acb7df355e98a2e5877a7797f0f1d41a7e415
SSDEEP 192:ob8cSzvTyl4tgi8pPjQM0PuAg0YNyhIFtSP:mBSzm+t18pZ0WAg0RhIFg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Afmeldelserne/Bilskat.cdm

SHA256 e52de58973b8f26e8609a086a5c396156d0dff635bb83fd8a305dc31cc0e717f
MD5 0c926b72aa1a25e755726d900a8ded2b
SHA1 c42c346a00c1b660b939a2257a6e19ff5d326dfd
SHA512 9e210b92f2d12a37907347291d8dd192f6418724445d0c80ae368aa66ab47a95605e45513ce81e5a2fdffdbd22ca97a399d993228d3cfc319f61df5b3942521a
SSDEEP 3072:vV/aAh4pPi52lPhD7pAsfMeQG1HEgN0uSOcLg7/By9NRzwhup:t/nIlPF7KsfMevku0Crhc
MD5 SHA1 SHA512 SSDEEP

Flumerin/Cadetcy.bin

SHA256 cc4f4bdbe998b696ec6af8dd9d5d51abcd67674648ae24f1c59c40c431bc6e5d
MD5 45f1f0b16a621607f077ea293eff2aea
SHA1 7f0525904dc87e575706e522cb2b389609fd68df
SHA512 7ec20e609c6bd5d752ad644a18b13a519966dff81ce9e23f71f2bf2fbd3238b19da66e9eb6a0a57313db6adf90a1fe15d0c48a839f641ce80997360586f52544
MD5 SHA1 SHA512

Flumerin/Faglrtes161.tru

SHA256 4b3cdc417b8e908c6dabef03fa9bdc0ab0b25e88a01254395378cb0797892f4e
MD5 bac1bae5e7c710632073fe5e30d7ea95
SHA1 7d9de95a83c4b3fb7d71e493682edd438ee03786
SHA512 e131936530683830d0ee7dfcd28817cb41c96ab8c68e8cbfc02f9cc351d5dc7b6fa9ca9d1f23262991277a8a96d80b71f8b257aa2e394aaefc2c0b74b17ec897
SSDEEP 96:2tmgl2AtyUn2gOd/zn1m8ntCkuCOT1Ujt6L/EMF3R02in8a5dNME+u:OmgltXn2HxRmcluCOxUjgt32zN1L
MD5 SHA1 SHA512 SSDEEP

Flumerin/Incomer47.uds

SHA256 467e7d6f30912c31789d05bb06abd9a16c29fb335d30b976c0dd88136e015227
MD5 755a1e8989b34127d0e2949c292f0da4
SHA1 124b7fe165df61b1a80353ff68d9eaad64ece7c5
SHA512 2b843d0b2aa75b82821902642e7c6cf8095255cef08ae8443ccb9c90fa3acd94c1b2debc033290a721d6be79ec5f0f4067b890319907a0696b5ea15b1531dfa0
SSDEEP 192:tZLwhrFHGe3p439O2bL0fMU2Vp2ZqoRJ3motNKL17zYfI:t1crtGe3I9O2n0f+V0qoTFERYfI
MD5 SHA1 SHA512 SSDEEP

Flumerin/Isthmoid128.txt

SHA256 841bab0a6fab43107267768ff6245474edab478ccf66b2d4da8a4101cc397d8f
MD5 4c854e2e4b6eb1491f9db937706c750c
SHA1 a28e03d06a9c7aa206d58fc822ea3790ee91c1ac
SHA512 832033635fdcd2b70ff7382efb193e64a9285f7f86effacfe19b499d0341d887eb52a352dde1ead407fbc625cbf101d87744a07996af172382f5541a76090d7c
MD5 SHA1 SHA512

Flumerin/cauch.Car

SHA256 1d094f2751fd1173f2c5f82dd8ce777adc1ea2e2b98ee0db69f148b7906ffb14
MD5 4ebf427559c581373428bc0d4816ce59
SHA1 8d7a1c031bc7b4289b2068fed80e722a4b9e5512
SHA512 400f44896a4fba2c484405a653d31dc48fbb75a6a24cb6f385561e01eddca980b538938d9cb3b0102481906781bc1a2c9c7aca33941f5ad880c6306f26f7792b
SSDEEP 1536:YZq1VvEMXF1RBEja26+AwVtwcy7ty47CRzl4dslKiz:SAVMMlGXDQ7g4cZH
MD5 SHA1 SHA512 SSDEEP

Flumerin/images.jpg

SHA256 86fa8569a16f13965b41467fce92f0c405121758e44d38057ccdff02cc902619
MD5 189c585d59d1b5a7fc2fa0cc04777c14
SHA1 c7f0d25e9e00226bd19692bf4e139afce79a3d3c
SHA512 55dc6ab99902ea0a7a6a5dbc942998f7ec19db78298a35d89a72ac906786a3697d36b0954f579f3a6bf1d828a49499d7d3228374de7688b127adee5f783585a3
SSDEEP 192:Hwt256rAb6+YSNU3YtZkWV3SFT0VCiMIdb1TeXvthPlno6:QLsMhOJV3tCuGXvPi6
MD5 SHA1 SHA512 SSDEEP

Flumerin/shammashim.var

SHA256 c21232eccaca0633b46f19ddf9a0fd88f769755855cef47987e011b372e0df0d
MD5 be45431798a2467546899124e4850bf5
SHA1 97719c4c5d0f79f7d9e5681a92b471259ba4d8e4
SHA512 5149afb65ca65c3e193b75b19290045cac8a2437b44770276db81481d2487b6e8682f6c8c71675da0a739403ec87e21573cb7c9d53ffa82b3d19c9e8861ae7e0
SSDEEP 96:ER1qIvezhzpKcZDwDkJNZHAIbN16p6BmrYVneeOGfv6yjtLuVIaP6xK:6UsEBpXDkkJNZHAAXmYVeeOGflKVI8sK
MD5 SHA1 SHA512 SSDEEP

Flumerin/tyrolsk.kon

SHA256 8f2ae756c32aeb3cbb8274c9b27700df7f4396876a5e456b5d70583f9a019df0
MD5 4b70734414246faf83baa2bc4118b38c
SHA1 a53918c63e1ed65448e7647ecad9c6098e8ab19e
SHA512 b8c7cb039e54c4704ea341545bef882ab681583976ab78165955d6d56e250fba29537830c81222f2b73a57f5121d2f598ccba4a6f0fc19d0b0bd0e5a738d57b8
SSDEEP 96:WuCijqdYzHRN6V3OQEpdVssmztOLY7Nmc2CotD/EEaPOujCVPZawE9cHqTz:/djqdCRtQEdCztDwc8JEEaPNCVPAbb
MD5 SHA1 SHA512 SSDEEP