FedEXArrival-AWB102235506763[.]exe

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

FedEXArrival-AWB102235506763.exe

IMPHASH 61259b55b8912888e90f516ca08dc514
SHA256 7903ae5797aeb3fc2438a2681ce14e5957b389597a8b63c72d14de1191e27604
MD5 d4063f73e358bbd79f27d6f4db61b0e8
SHA1 f404f1aa5855ac5a32b2736c03b71a8fe88ab230
SHA512 a8551cebfd83081e9817374c7571b7938b9bd433534449bcce364843d50a87017d7c82205ed5aa313a1f9f477fbdc97dbc4ab8da5bbc7a6e8b4610bcf1bcabbd
SSDEEP 6144:XYa6qP7JgKpEWLXH1Q/nFoE965vjFckALHZ1S9d+Z/2aYAqrGg2ZZs78LofX0oRM:XYk1XH1OnFV/BHTMd+ZO8qrIvcFdlgVv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1a:15:8c:3e:11:0d:ea:57:2d:f5:31:fe:e1:f7:07:f0:54:97:9d:f7:7b:3c:89:c7:b5:4b:e6:96:b6:88:f9:fb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Nether Smaadelenes\ ,O=governorate,L=Torcé,ST=Bretagne,C=FR

Chains

Aug 5, 2024

PE Signature issue

Digest

a2:a2:74:95:7b:35:a5:7a:ad:9b:58:7c:b2:13:02:5c:3a:38:6c:d2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Nether Smaadelenes\ ,O=governorate,L=Torcé,ST=Bretagne,C=FR

Chains

Aug 5, 2024

Minor OS version

0

Major OS version

4

Entry point

13888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/LangDLL.dll

IMPHASH 3e8d18bb71c7ebbda2ddc2a4bb03547b
SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
MD5 68b287f4067ba013e34a1339afdb1ea8
SHA1 45ad585b3cc8e5a6af7b68f5d8269c97992130b3
SHA512 06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
SSDEEP 48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sejrsglders.Sco

SHA256 8ee26c1eb4c90528b742d6f0a81917aded084bf9c7fcee60cdbc785c3b3f1fec
MD5 4659247dc7242d090cd286980e968b11
SHA1 f3a47e3f6bb2435a4214ff383c80bc30af7a9205
SHA512 4f438c208b08f5e4a4688e3ee8780c45dc0ddf60ca89fb96d6d0b3e5f7e1465879bff5b638c7e49fec6ed28b5546e528b73623025bf2f368218dc983c8a5a660
SSDEEP 6144:2jGqFjwT0VuVvtBG+BCl6JcMYUdj2CaJrfS+619+d6sKiU:2jGqFjPCGWKCc5Udj2CaQ+6H+8r9
MD5 SHA1 SHA512 SSDEEP

damoisel.Fej

SHA256 6d297e55f56d624a9dbe328b65fbcb5ec24ad2f65806917c05e359c044da8a65
MD5 ced602a027f79c7252037948525ae317
SHA1 fe3a62386c7b8317e362d516d4031ff18ff647d2
SHA512 c290cde5a4270391a684ed2b4051ed06d3b61aaf6f34aabe43614e7d269cc6b60dfeb330115e5b51f227b85ab6bc63986882a59ddbcd3bae10dee358b6380a94
SSDEEP 1536:Jkvhbu6pE2wJRwUIP72qaEpCBeff0m8Rkmqou0vvjJzygj487Hk0stp:Gv72TxAos8vs7
MD5 SHA1 SHA512 SSDEEP

empressements.txt

SHA256 99d0cee179afb233cf5462cb9e6636b55395f87d011f1940933921d47cf9be26
MD5 f0baf46968beb1e6ccba492b2c91829a
SHA1 bc02922a4f4596270793c2116122b2666c92f72a
SHA512 afb809d73f08c98f5b74493eada3831f4c82226ed53479dd098992b7b365c46cfa2cebeef3e7478b0d30807a955b1c63d99ad33c32912e33383341513698b802
MD5 SHA1 SHA512

hooverize.mus

SHA256 6d0a23d128b5610a8ee4126d465c1b88f6a3ed865cf3774affa41d6891cf3009
MD5 7f607bc429898669a8666115d7253386
SHA1 5e1ad42c08108689ccd28475e899990bc3263fb7
SHA512 2b26a64fb00efec59fc568957541463145db3d7d2e231f8192c7666e696a01be657be0d4754502658ab789373757711812f64518e82bbf0087493ca0c83c99aa
SSDEEP 768:ZpXK6efRhFDRtbbtlgwamDpUbkXdPrNfbae7UOyl6OiaeixXhg3TUKuqGloG6NTJ:TBRLJjs8XCX
MD5 SHA1 SHA512 SSDEEP

renovatory.gol

SHA256 609e39809a889ecf96af8233eee0509a9f8d7507ea41ddc69b1229be4e3367da
MD5 96e4e86c2be4449afd8e03947fa2c985
SHA1 3c6b605756f22220d23f067aa9f91820da5df733
SHA512 ed3be874bff7cb7368c7db5bcd30f597591e845ef623420cad1c6cac01815cc927cae9619bc032a19ee7fd7c4ed51548e40f364f6ad02f7c057bc29b12e1c452
SSDEEP 768:eFlAe+SNuCUi/off5qWr4wvrkBm8by14CCQPwKmTrltkyOeqkVcf/DCxJI97Ezs1:egkg4Kq02WFdDGG23Vvm
MD5 SHA1 SHA512 SSDEEP