Brnesde[.]exe | Triage™

Brnesde.exe

IMPHASH e221f4f7d36469d53810a4b5f9fc8966
SHA256 3566b134a76d197e837c797e1bc2e5395b54488a4d1a1e8f24fe0bb78467eb40
MD5 c69a02e6740a3e0391d961db6ff3b0b3
SHA1 2e83d1732afe42680b27927fc5c23e63246f3cfc
SHA512 bfbf9071fd16437f78637aed5c38fc4ee8e171ec75ca012f8a0ab6253041bb1e83b6a79c139c9a5017fdbd1d3502d2a8f4b3172be5ad5c141db4721c3a6145fc
SSDEEP 12288:Kl0x0NTx8/MWSMaG6s+nIvbcIst8pMVQwvN9NyWilkE0I+VNEpCpiZs1eCKDwQS5:741WSTsrDcIc8pM+wkxp0vbRiZs1etfg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

12:32:c4:9c:01:7e:bf:35:6d:a4:b5:bb:ed:f1:fe:87:40:80:a5:e9:94:4d:79:c6:ce:67:5b:a2:41:3c:78:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Gravet,OU=Kasseapparaterne bageriernes Datatypes\ ,O=Gravet,L=Cambremer,ST=Normandie,C=FR,1.2.840.113549.1.9.1=#0c10746f7540626f6762657272792e416e74

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13146

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathW SetFileTime CloseHandle GetShortPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError GetFullPathNameW CreateDirectoryW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW SetFileAttributesW ExpandEnvironmentStringsW SetErrorMode LoadLibraryW lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW lstrcpyA lstrcpyW lstrcatW GetSystemDirectoryW GetVersion GetProcAddress LoadLibraryA GetModuleHandleA GetModuleHandleW lstrcmpiW lstrcmpW WaitForSingleObject GlobalFree GlobalAlloc LoadLibraryExW GetExitCodeProcess FreeLibrary WritePrivateProfileStringW GetCommandLineW GetTempPathW GetPrivateProfileStringW FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar WriteFile lstrlenA WideCharToMultiByte

user32

EndDialog ScreenToClient GetWindowRect RegisterClassW EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData wsprintfW CreateWindowExW SystemParametersInfoW AppendMenuW CreatePopupMenu GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage GetDC SetWindowLongW LoadImageW SendMessageTimeoutW FindWindowExW EmptyClipboard OpenClipboard TrackPopupMenu EndPaint ShowWindow GetDlgItem IsWindow SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegCloseKey RegOpenKeyExW RegDeleteKeyW RegDeleteValueW RegEnumValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Averments.Bif

SHA256 3e3554c25633c3b93778fcef9b984f52bf4646f560ef04ae6b83a59fffdc8c6b
MD5 acb214c6fa5b9ade5dab9fa75f8be6ad
SHA1 11103ba1783f1082539e64efd11b46c26b7f401b
SHA512 7407868bb589ac15746c38aa87c281d6fa918ff7571d28c50f55745c8cdfc0a0828b64af316247f42a527f45876753a205a4176396fd85168b2b83c4cf1fe609
SSDEEP 6144:dvzq8vGU5oNfrY52v1im0Lj164dHgbfIdxEhKw/Cyp1Lg2sz:08vGU5o1im0v16Qg8dx1ync2W
MD5 SHA1 SHA512 SSDEEP

Comeatable.tra

SHA256 a215d6cd786204c095ccd6b55e16465563951ef126195f6288cbcd677564f4f1
MD5 d9275754cdb8fb5c67adb4147b57447a
SHA1 1c99cadde435934233d151591868f9d0dcd3d6b8
SHA512 b932a9da7062267b64a406f089b9713f9cfefda20ef872414dde3663bc822a25225c5d922ca324bb483a9e21b7e26fdec969fbc33a11348e22b81905c16f8985
SSDEEP 768:Iu4ejp9xDdFNBxvMB2W+j/eH6oKtPO+jEa8FYBAabliM38clMrlRH3NV5SUrvMdA:R1r+EjXb7ErJAH0Y4J5gRYF
MD5 SHA1 SHA512 SSDEEP

Otterup.opv

SHA256 4d03ce06f92c8515704352cd860c1330958e4451daede9145016d5018340e436
MD5 6648f5a5da27e33dbfd884c7fe813f4a
SHA1 edc93b45299fb67e640a8db8e98127afcca5fca0
SHA512 8f130c15829ebe380c4589dc6d773888e55c4fdc6700401b5fc4e818ecf36255c281dd00acf79aac43bbe920d80fac6fe1147e7fca46a20cafa8ffbb78ef8a62
SSDEEP 1536:m7lkDGkLzoXEvE+BV+9OSV+A3QUz98P41XC47T:m2QE1N5Ux64lC4
MD5 SHA1 SHA512 SSDEEP

abonnementsbasis.oph

SHA256 70b035bb25573ac0c82405050cc54b333225a851038c2762a2d39a24e1ddec08
MD5 20f5cf37467b5afe86131c042e942aaf
SHA1 66788f9fe2d5e0d7b7d420a1ab6c25cad6aef054
SHA512 cc798bb25c0fe20298236f04865e15fd36798775cdf3ffa126fd007676e6be3d8cc0a518ce569cff5d82e88f787d88a748348c9703bf10906e565cbc2d25a28f
SSDEEP 768:7xk6Eo+GhCvrnB4k89yaNcgNzQ40qXrlKrH3HfJbJla2gyNf1EXOB+fB3r0OGb1H:FkZG07+ZQmiF7Mbrfx0lqoni9DzRTIj7
MD5 SHA1 SHA512 SSDEEP

oppugner.Fin

SHA256 43bd1684683347321729462e7486b66998cf2e2a36a59279fde5651caad63bc8
MD5 04391ad19a5faf0f2b6b55a651362605
SHA1 162222e45632fa3b9d1de454dff25c5c452bd81b
SHA512 72b43a95e49b3aa4a59c6d34d9292f7d0fa166354d994d929591251496ee71c279192e807122cd698be2192c00d0cb6629aee2d1f749913afe453c835ca7a43a
SSDEEP 768:I9joOPoklnuJecH/zvrTRQOOSqFGxG6eZbazQdRXvSgzVehypcmby/W80lMz:IepbzPU+RehaUdRKghehJ/W80Oz
MD5 SHA1 SHA512 SSDEEP

populist.ant

SHA256 3bacf7a57f97302bc72688abc4091a2aff58bfa8ce8f743c8bcbf94ae172b319
MD5 fac3ffec77fdf44452c0aabf0bdc8491
SHA1 fbdef2e2e9b67baacbaadefdec0f67cae8b4ae82
SHA512 9ae7f9a780c04a288cca76e606bbcb795e784bd16b06779e8257199208bc623cee016e56d30ca6197d7a01e4312a6c8a9d535b5943e2fb6915877a5ede8b1021
SSDEEP 3072:3VlxXdaNW6Cwbyh7BvHMZNeu7+23ylPS7CzYr5Xuh:pS1VbaGZNbDyBy5+
MD5 SHA1 SHA512 SSDEEP

servicet.eli

SHA256 7fd6bbebf13d36cb0ff77163a64952f9c0beb6e50d7684e6a262bfb0f52ddc04
MD5 0b0b75bcf1ea6253fb00033be0f32da3
SHA1 a4005213d7a23a537a11085cbb2bd474dbd749b0
SHA512 231325c25ea7a3119261f9c01c37e835087d11228e206a6fa67e73efc789f10857255635db6f4c4a1e6bb24c4ac975702e941680936ca4a93aa645bf99de2e55
SSDEEP 1536:c9+iRUxEiJZHL9boh+tO1tR9NjgKfL+J8jac4jLK/+UB31h1uugJQ:cdgBtK9Njziqa3/K/T1O
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer