Transport Plan[.]exe

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

Transport Plan.exe

IMPHASH 3f91aceea750f765ef2ba5d9988e6a00
SHA256 4142f2d4724e38b3a0712411f9f6144c9881bdd42cde4f3601a5a4f295b5290e
MD5 7fdc46580498088a1dc91931106cd4db
SHA1 77a284feff8611b989a1cb0ca21d391891baacd9
SHA512 1017c29643815df000bd0f67bd6b6727bef7068b72572fbbb52728867e1a5230d00fe5ac03a527ff4fa8e64cd741a8c7cf7cabf524170be408f5e7b9a9c0c8a3
SSDEEP 12288:xfHaHANG3RciXlV4PMlmvI4HEZdIc0NPlb+ZXG/qtgCE++:dHaHxccV4PEmBHEQ1NPlyZX+oZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

9f:9b:ce:f2:4c:dc:fc:e7:15:4c:a5:cd:b5:fe:08:9c:f3:60:1a:4d:36:4f:52:d4:ee:95:4a:5a:d7:81:d2:3a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Outchase Kalmeblte\ ,O=Crookednesses,L=Nivillac,ST=Bretagne,C=FR

Chains

Aug 14, 2024

PE Signature issue

Digest

4b:07:2d:61:51:9a:9c:fb:e7:ef:23:ce:c4:f0:f4:bd:d3:ab:57:88

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Outchase Kalmeblte\ ,O=Crookednesses,L=Nivillac,ST=Bretagne,C=FR

Chains

Aug 14, 2024

Minor OS version

1

Major OS version

5

Entry point

14076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

ShellExecuteExW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderLocation

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW PeekMessageW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

WriteFile GetLastError WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess CreateProcessW GetTempPathW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetErrorMode

$PLUGINSDIR/LangDLL.dll

IMPHASH 7dc2e9f6e94bce5fc6b9a1cfe4f3e41a
SHA256 507df75c959e1c9a89febb3f5d5963539895d9a602f4e6ca7898079919a83352
MD5 232f16c1cb21335fbce6f78ddaf2458c
SHA1 1c5981b852b3b640c98547074bda081c38859c3f
SHA512 cb8fb45ffe04e759816cb931223aafa42c15e58f1b35717f59a14c665aa94b48c393ff1a18ac480165ab090fed9226111ae2c3f4e9aead413a105c6f15515227
SSDEEP 48:a/atDVP10LgQL8QRU8IlmWm7WmnuWK8hSemoMqm18FG49qofMU:lVPFQIqlemWm7WmTaehmus
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4761

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 4f33ea844b96a31c8f4690530ba63854
SHA256 f917aef484d1fbb4d723b2e2d3045cb6f5f664e61fbb3d5c577bd1c215de55d9
MD5 d6f54d2cefdf58836805796f55bfc846
SHA1 b980addc1a755b968dd5799179d3b4f1c2de9d2d
SHA512 ce67da936a93d46ef7e81abc8276787c82fd844c03630ba18afc3528c7e420c3228bfe82aeda083bb719f2d1314afae913362abd1e220cb364606519690d45db
SSDEEP 192:acA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:RR7SrtTv53tdtTgwF4SQbGPX36wJMw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Dialectally119.udb

SHA256 38947bdadebf7833ead2027bc1c88201bf48955cf06ce3fddba5310f1741d8d7
MD5 54a8a1c4d6d989c57da8b42f08e605c5
SHA1 e8de85977bfa4b3df3d275ebcb4eb9df47939cba
SHA512 9774f6c70067fd19f7c094faa42b1e96628747fcaea6e3b6a1c3f9c54dc1e7e6225a955afc828c66d9e2c32f72af99c2d969f406b2f55372233b440e3ae46595
SSDEEP 768:807l3rwWO6bvtfLHFb1ocC0LhCF9V3CFpgMegj09P3CcoucnK0bNcv+X6Vmqab7H:fzKHYKiNigF
MD5 SHA1 SHA512 SSDEEP

Graveredes.Ved

SHA256 3df05d5c7f2ab78bd6a98fb3cecf3ebe381050a187bc596aa130c0101e4e729f
MD5 51c00c92302be1793f27230fd92afc82
SHA1 56373c2930e8243dbcb0ab0a9e61c74e0d7ffa93
SHA512 5e366ba09a4b253787b2abd263160f24f4ee37fe24d36de87a49df9cd9a163140a383019ce40fb35acbe876cf0681a9434b347cba951c95714cddfd7445802e8
SSDEEP 1536:G4bkSani/1h3AF9Cz4ilDV2Yftl+oMVOTb1g:BVZvJEGHq9
MD5 SHA1 SHA512 SSDEEP

Trompeterenes.Ana

SHA256 5f4d973f34793de71b002dbbbe2ee7136465221ed430423775ea3718fdda9684
MD5 729cae0c9d9c5c54fe25ce29d4dc25aa
SHA1 482c388955a76c9a5cde6c7fcb172e4d10476e7f
SHA512 22dad8e9be6016e9aada8f088f664dac423285194ee7447c67d82b117c85df98335c4adcf8f52b761b6d0f386cf3ffbed4704df2c63adb63d3f64aec10c35161
SSDEEP 6144:JRUdLrGJKmR0xt1WICfoNOP1a341mIWYUoaTKo1PAbx4xER:Jh1mx3HNi1+4cIW1Goc4xER
MD5 SHA1 SHA512 SSDEEP

elixir.aut

SHA256 9d1157a597b3116fd2990e2e71bb91a7e84e68729cb3e04b55233f8bf70bf7c4
MD5 c3632a9dec09fd0d4f536b9efd58b49e
SHA1 a2cf8fc6cd59bd6673a8959aad67f4f48b18692b
SHA512 ce9c87e3d43225ecc5764cb34f4f1ac516b3d967659f07ed551f8cef52b0d1913b36004edda8f21a308f2001beab014b4a22f0e8bdd63ad3bce172e0a763a7a9
SSDEEP 768:kbrS7qeC0bzjvmyGRwsO+LfVR7zHgYm0QlC2X6vTf7Pf+8SsYsDbvXf/qHe3rwM0:dzj0fezQ
MD5 SHA1 SHA512 SSDEEP

flakkeriernes.txt

SHA256 9e6733e801ad04ca28aeb4e6967f6de7734f0ca7869f186bcb5faa8ce178e560
MD5 a3fd1baaadc43df76c6899220da6bb56
SHA1 1293d7506e36a6fd35f7583dffedae88e9e16e9c
SHA512 69c488564e8cbd391896e5d50aeec9ebfc6cc2db336426f9565ffbd9726087a7f3e85b52bc36520bbc091769f6151d82540cd82251bf6417e9b0cf4d9e61ee0b
MD5 SHA1 SHA512

uplifted.pre

SHA256 78f30379e9c1edfdc44e336e0a166eaa99c16b3856ff2a3175ed56b5eb8ae181
MD5 0e2ba329bb47fd21811ad21526435716
SHA1 8db35edd9292382d380fa9b0427883287f0c784b
SHA512 883377181bbcee437caac857c89b81a422109c2d4480440f14844061b7da30aafb0906ec725b8da2bcec61cd6578c0b12684619b5a1ea8e825772a40c5e93e89
SSDEEP 768:TQYvwGs1eA9YYC0jg+KArMMVvbGZm3QMYOTX/EF5Oo0l2Ulm/0pR:cd7
MD5 SHA1 SHA512 SSDEEP