be097d80233fd20b30cdacd88fbb4baef2ceabc7e45daead33b675ff4dcc4005[.]exe

resource
be097d80233fd20b30cdacd88fbb4baef2ceabc7e45daead33b675ff4dcc4005.exe
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

be097d80233fd20b30cdacd88fbb4baef2ceabc7e45daead33b675ff4dcc4005.exe

IMPHASH 3f91aceea750f765ef2ba5d9988e6a00
SHA256 be097d80233fd20b30cdacd88fbb4baef2ceabc7e45daead33b675ff4dcc4005
MD5 86f6d5340660600317dc3481647ebe32
SHA1 c3ae7e6c0f47a1b9b434bcf315f638a5a1bf8345
SHA512 01c9e08555bfdc6ab9f9bc908fdf52fda9b23d78862600f18c0ce0c0e77f6b6c89fe008850b9181a90e873fa5f104975b58be8624dbfdd8fc56f9af2b8936dd6
SSDEEP 6144:sxwgiJ4hlMGom0ymbOdwiJMAIzuAeoeqZipjE3YfBxYbZI0Ti:eS4vNoL7L5A1uZipjEIfBxP0Ti
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14042

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

ShellExecuteExW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderLocation

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW PeekMessageW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

WriteFile GetLastError WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess CreateProcessW GetTempPathW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetErrorMode

$PLUGINSDIR/LangDLL.dll

IMPHASH 7dc2e9f6e94bce5fc6b9a1cfe4f3e41a
SHA256 92cb3b3a7280246743543325d3fe9a7d72c63227f9540d25d5ef27b2ce8856b4
MD5 af4324802813a5a897db2167fc10e291
SHA1 916bd47457dcb4247743626e86492436b77bebf8
SHA512 cb3e07c4558049634078808bd419860c6e2855a02bba79541cea80873fe6db58cf667a27c111521df09ef30f92c149736092c473fde28bbb5974be6d7ddab83c
SSDEEP 48:qcjtDVP10LgQL8QRU8IlmWm7WmnuWK8hSemoMqG5QEv8sF9UwofMU:xVPFQIqlemWm7WmTaehG+Ekq
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4761

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 4f33ea844b96a31c8f4690530ba63854
SHA256 1624d9ad8b2e2658af224691263f64388ba3a997efe80011889e3c35237ce4c1
MD5 6c38da8922cc37b4bbb77de4a63ad843
SHA1 4e0533fd11df8bddbd543ed58df7b6060d9f4631
SHA512 ad0be3d7e57da9c304e9b9cac5341b6c76b157456ab44f5579d6c38c830a31c9c3e1e9a875b8f465243c607ea2ede6b0bb77237f17a70a4d4c78606e036c3430
SSDEEP 192:wA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6gn9Mw:QR7SrtTv53tdtTgwF4SQbGPX36g9Mw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Janisaries.Unf

SHA256 9e632fe8a0b8fd2c2caf59e5eba0159deff30026c78d1c6e161d35f47ef8927f
MD5 f76e1be626315b80675ef607dbbbd53b
SHA1 874f92694ff0171aff19ad9a6d70cf56eccd4dc0
SHA512 3937f0f7fd3d9ed397b5c8947fd3e661b09f5e6bd1231baed178e32d95ce9bc7a438d47f746f1dfdf676b33b1cd2049ef959ad760920d1dc737d29e26a4442e8
SSDEEP 6144:KdhvF2vEeDkyxRc4Vyp4KMHrOzDlVbuiZ3vegNg907l/PZeR:2h92vZvHV8NVuiZ3RNgO7l/PZE
MD5 SHA1 SHA512 SSDEEP

Kisserups.Kum

SHA256 dc186c650ffa3a6f78a12b77529bed3eb48a0ae3e850417a7057974901041c16
MD5 0552e1c8c4df1d8a466fae1f03544885
SHA1 429a2562e5fbaab0499d5664ccc1d4d876340da1
SHA512 763ce9ac7f13a6dc0d060a648a55caa0efc9b980709e91059b15cdfcb1ac9e03ea43d2fd958ff4bf97d61ed36916cf2779ed1fe52f387131301382e839cc568b
SSDEEP 1536:ZFvSw+vlY+SLRUqu/OQoHremGkEuDaa9QWK:bStEGIwb
MD5 SHA1 SHA512 SSDEEP

Soricid.spr

SHA256 0eee0e4b3b1e6f21a23a32f32e5115fdba1baea74f5f5364624971b88e2eb8f5
MD5 66414689a47a89419cfedc52bd474f2c
SHA1 22af451e7b4124b737573c3e1538c2bce9bff0b2
SHA512 47efe671aae40d94c0f70dbadad35edecf3a5905fe7e20246958abcf563f5c86b0ba7499e4e77a8234bd57217f1207cfb4de0574755eff37751c2cfd81f1d80d
SSDEEP 384:9LZDITjLE/CTVlxpaDy9gcIDcfT4OJ1UPXu5OvLrt7V:9LQWwjCDy99IDQTnJ1Upp7V
MD5 SHA1 SHA512 SSDEEP

Sprinklingernes65/Cuoco65.sjk

SHA256 517c352ee95b347fb1b401a250275bc1efd11c8791948e56f605c3a83a16035d
MD5 1edaab37c00abc6faf9cb0a3c0e12b59
SHA1 2d97fcd04b6ff1dd4747925017b100ed82bd954a
SHA512 c2b84190f63f3eac99f98b5315843eb17c1d51e026bdbf0a86538b1295615fcdef1886dbad0167c88a60ff62d598e84c69bc512dc47adc8fa68921a5e90456c7
SSDEEP 384:eYJ4rij37mtcL0RPwDItXRTZ9gkc3xwzVReVCkpic9dTDz8:eH037mGL/sbZ9gkcezVR4ic9N8
MD5 SHA1 SHA512 SSDEEP

glissader.txt

SHA256 bd07ba8fd6ca068308fba9fa43b6a44fd5166121aaa6d8de83c77f3db10b52c9
MD5 ceb6bbfec1fd6fada75a5013edd70948
SHA1 075eee41757c13d94c0d731a2db72cf9da06bce7
SHA512 e0d40a4825c9ea2aa99f8a9cdb05c9bb527b28af5fc787672f6d377e36e127f5c5ed8388259417fb470b701a513946c0e2b1fd14a7cc93ccd80f20655fffffcd
MD5 SHA1 SHA512

militaristerne.smo

SHA256 6881c2805686a0b05960d8b990a166baa82dd7ae82f0d243d5647702abf81d7d
MD5 8f28b6a06d784e1bb063a396d39d9f85
SHA1 1885308ea7d5f896e65dbdbbc36c2e253e6fd2c6
SHA512 fc66fb219a11faa4a4656ede118eb6a8f5159ef5761c938c9b994b4b6598e3d0382e70c580b140a08ae009cc614f99c35ba638ba314cc259418f52f85c1c3688
SSDEEP 192:QlRs5UCQ77Iym2fZXa0DTA3P1IatiV5LRxTbvgbqoLWVhe9SxAG/Ni:QffCQ77Iym2hK0DTeP1IaEVVRljgbqot
MD5 SHA1 SHA512 SSDEEP