RMS RFQ#2110474566500464 202407231[.]docx[.]com[.]exe

resource
RMS RFQ#2110474566500464 202407231.docx.com.exe
unpack001/$PLUGINSDIR/System.dll

RMS RFQ#2110474566500464 202407231.docx.com.exe

IMPHASH 3f91aceea750f765ef2ba5d9988e6a00
SHA256 fed0ecd2eaf8028eddfefd92b374bf515059a07daf18f30fb1e4faf9b1d4c3c2
MD5 d983cac84e56d54293702d8c0db7bde1
SHA1 e1ffbf612906e2973e0ddbc11c15e550a490122a
SHA512 2a8f3611f359ef4528d75450ecdd46d2b5327e4242e59de010c267c8a2199dc274152e60a2d92c533b036adf3a3126feb2c048db394ef31a2b03cb811b87eebd
SSDEEP 12288:FS4no4u8XXmPSVGYu4AABq1sBT02EXw/Z4lPzW/RKOFfJpIYCR:o4nofmXmKVjTAAs16Y2EXsZAWpKOFfkp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14042

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

ShellExecuteExW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderLocation

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW PeekMessageW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

WriteFile GetLastError WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess CreateProcessW GetTempPathW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetErrorMode

$PLUGINSDIR/System.dll

IMPHASH 4f33ea844b96a31c8f4690530ba63854
SHA256 f917aef484d1fbb4d723b2e2d3045cb6f5f664e61fbb3d5c577bd1c215de55d9
MD5 d6f54d2cefdf58836805796f55bfc846
SHA1 b980addc1a755b968dd5799179d3b4f1c2de9d2d
SHA512 ce67da936a93d46ef7e81abc8276787c82fd844c03630ba18afc3528c7e420c3228bfe82aeda083bb719f2d1314afae913362abd1e220cb364606519690d45db
SSDEEP 192:acA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:RR7SrtTv53tdtTgwF4SQbGPX36wJMw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Thaiens.Scr

SHA256 b0d6688bfee97fb0d32b20434f85a71d80ba47311fe538c3d38547fdf7838af6
MD5 d88e423242ec6f60c813df55bdd39460
SHA1 4b7dc9498b71f92883d61bc5d59e009ce1c83601
SHA512 288cad2926166a9edaad1d832b507445843674d41444138d5177021720a485575bf9b6699b828ab217f8b6a4b119ffe2e316993b674dbb8c93b0cfb251de3c22
SSDEEP 6144:QexAGug1acFfIvxEy/O8COwObXVJW+PvRxJX3xgP7o:QebuhcdgVO8CO9lZ3VXG7o
MD5 SHA1 SHA512 SSDEEP

Unappeasingly.ibe

SHA256 5ccfa4c4420452f6f0d79763ba66e7c5a1e1e1cab625e22cb417cee35030fbbd
MD5 e83db4f0ad1bb79e0433807dd33bf829
SHA1 f9099ff199c230d75f1b677350e1405e0a0ead1a
SHA512 f1b9796b3c20920ef384d4bb26370a3e19dd81a32bcb72df33e97f1fda21484ef066cebc571f0a1c20731a5c22acdf4714e7f1f01209278fd69d7a38c4164622
SSDEEP 96:wESiYUUU/Cw5yTdCooXwPiCyhbb1z+e8ehYHjKbUd/aCoiZBaevU6kcjwTcrturT:xSvU/Cw8TooSEfklzN6KbUd/aCpZxvUx
MD5 SHA1 SHA512 SSDEEP

Unurn.Dse

SHA256 1dc1179d4716153465678cf03f06617edffacfac9aeffd1b2edc408507d389b5
MD5 d1fcaca012b429fad27795b165aa8967
SHA1 4f228bc9dc9d6d1c6af7afe1f4778da403738c4f
SHA512 5c4590966adbcd29e87507f27f81e0d89a6989d8a25e91bc43b48c378512179cc92399684d33af3b0cf6bc1a741b913e79dfd44bdadea80812693d4552cf6475
SSDEEP 1536:FRnE4qCkHlmgDs8+pXz6icgvcJf4MJ9trb3yqdt7ii/1y74NUMfN64Wl5X:FkCkljKWxgUJTJfb31Li41RffN6J5X
MD5 SHA1 SHA512 SSDEEP

Vulgariteter/velsestekster.rei

SHA256 1ebe8285f7ea8ace927fba0ed06520d388e7bee3bcd5aef69b5898b6497dea44
MD5 bd4a9b5ed44fdd0d478dd54d1eab3323
SHA1 7f4bbfdcc061eafcbab8fcce87ae67e8eef84284
SHA512 45e3b662efb92a81f0eba1eb2bc3ffa89b57ccabf5e6680c4df0be2304ddb9a4fe6fc532d3ddda8f7715c7a52ec1289ac444df7a2588fbccc7098e2f61e5a58c
SSDEEP 192:rdUHPBYlpWMpCCLQW1RS/kCTgQoHfDVBsc+FmysjzNUCe9XkPGeg:rd2BYlmSQCRS/kOgQoLrsttslUbaI
MD5 SHA1 SHA512 SSDEEP

embarkations.uri

SHA256 2e1ea5b76151c83d175a5d6b051246ea0ad289e104154976c10c9b8bd8d4154a
MD5 7f32b56dbabb94e592810ac206b13d95
SHA1 5cfb49eb336b10e3b042e7134dde87f1422be031
SHA512 6e5ba1b4246adca8de0ddeaa267ec8f7fc5c26984188282c7f10809f819b94a0c2b90f3e6be0a1b578bcfcbf153f5b81733e5ed3fa9349a952e13b559c474ea0
MD5 SHA1 SHA512

fastlggelserne.hyt

SHA256 76b08acd3ffbc4f63453fd5da3ea0b9ac07f54664c7993c5a26a9caa07d01f08
MD5 dc8ad388b81597086742f3ad7ea4b4ce
SHA1 c01973cb3ef90e93e522392c49832c08c225211a
SHA512 6eb3d87a11557ba69135963727b07d34c37308518eb473eb129129a0e21e729f2d647d2df81cfe178d6f945595fc5c162470f536e46df0adc210a20ec4cc255d
MD5 SHA1 SHA512

rectal.txt

SHA256 ae1de56964a1d738c2883327dfc7e65cc0d851e0d65302760d37d32919a0c221
MD5 986aebcb2014943d77245e879a098c6e
SHA1 37e378f386a307ac97092bfcc07b334f6251b4c2
SHA512 14b270b410607cf1ad02eaa933dd7654db9e3e429c76209faf6615d178c3fec3ff69931c2a100bb8dd2bce738127639fc3088315239c6bcc6413efa2494eee67
MD5 SHA1 SHA512

sponsoratet.all

SHA256 3d44c554b0f3b8323bee8e56ad1f46fe3a313a674486f49bdc2e0a80f17a88b0
MD5 733bb0dacc9b0005a52c05a9d7bd6a74
SHA1 2e2e90e47a027f89d0b4812c35aa99dd2fbeb2cf
SHA512 fe81ad7357607f44ec9c01a97ebac97c87c6dd29600bde99e81ee9b7a78c31799ad82966cca377edd13264828eb13fa09ced5b2d03f5f85ac61d42e5321c4a39
SSDEEP 96:vIq4gOnHeSyEiyP8UVQnZ9DYPpphL5gWLiryoAFXL01FT5E5pTI:N4gOH8EiylVQZ+Rph+WLWPAdL6Ub0
MD5 SHA1 SHA512 SSDEEP