93f9f648e526fb97ed04a0b219aee1fe5fbc3e8d319ce2dc2cb1b35081eb78e2[.]exe

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

93f9f648e526fb97ed04a0b219aee1fe5fbc3e8d319ce2dc2cb1b35081eb78e2.exe

IMPHASH 3f91aceea750f765ef2ba5d9988e6a00
SHA256 93f9f648e526fb97ed04a0b219aee1fe5fbc3e8d319ce2dc2cb1b35081eb78e2
MD5 d0191f84ed4812596a8378931df27a9c
SHA1 5205f9232782c286e867aa71a4c95b6c1646c6bf
SHA512 ebca5faf61df443e5e098a929a3f44c4aea80981d63989dc6935525c3e44374ea2a03806fcee13cc83eefa98a84c9cdd0fedf58dae21536d6a8616e90c1e93d9
SSDEEP 12288:mfHx3h+uSt5x5iKGhHARjTNnlfP8rkNPlbYqtgCE++L:IHx3zStduZARjhRykNPlUoZ+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

f7:e5:e5:33:45:2a:a4:72:a6:8d:52:1e:a2:9a:8c:a6:43:d0:d1:72:bb:61:b9:5a:b0:dc:b8:0d:7e:6d:80:f1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Spaaede Krtegnes\ ,O=Petticoatery,L=Bridgend,ST=Scotland,C=GB

Chains

Aug 22, 2024

PE Signature issue

Digest

f3:99:18:4c:28:11:bb:ab:92:da:cd:76:82:35:7a:c4:ab:7a:6a:be

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Spaaede Krtegnes\ ,O=Petticoatery,L=Bridgend,ST=Scotland,C=GB

Chains

Aug 22, 2024

Minor OS version

1

Major OS version

5

Entry point

14076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

ShellExecuteExW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderLocation

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW PeekMessageW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

WriteFile GetLastError WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess CreateProcessW GetTempPathW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetErrorMode

$PLUGINSDIR/LangDLL.dll

IMPHASH 7dc2e9f6e94bce5fc6b9a1cfe4f3e41a
SHA256 507df75c959e1c9a89febb3f5d5963539895d9a602f4e6ca7898079919a83352
MD5 232f16c1cb21335fbce6f78ddaf2458c
SHA1 1c5981b852b3b640c98547074bda081c38859c3f
SHA512 cb8fb45ffe04e759816cb931223aafa42c15e58f1b35717f59a14c665aa94b48c393ff1a18ac480165ab090fed9226111ae2c3f4e9aead413a105c6f15515227
SSDEEP 48:a/atDVP10LgQL8QRU8IlmWm7WmnuWK8hSemoMqm18FG49qofMU:lVPFQIqlemWm7WmTaehmus
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4761

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 4f33ea844b96a31c8f4690530ba63854
SHA256 f917aef484d1fbb4d723b2e2d3045cb6f5f664e61fbb3d5c577bd1c215de55d9
MD5 d6f54d2cefdf58836805796f55bfc846
SHA1 b980addc1a755b968dd5799179d3b4f1c2de9d2d
SHA512 ce67da936a93d46ef7e81abc8276787c82fd844c03630ba18afc3528c7e420c3228bfe82aeda083bb719f2d1314afae913362abd1e220cb364606519690d45db
SSDEEP 192:acA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:RR7SrtTv53tdtTgwF4SQbGPX36wJMw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Theogonical19/Ammonoidea.Mar

SHA256 389a2ff8e9d5be341a9e198918e1f3dda80549bde9872843f67d2b330ad3b323
MD5 6a6cbc5fb15c6b44bcfa2c7d1e07740a
SHA1 2a8b95283e2a9880a07e70947ff0a6e758c1beac
SHA512 9d9a54d63220c312988acc4923b08155514aabe3406ec97f8df94e3e1cf1f1a446852b93c7bf89dda9a64773448e9d660c49dd426564059e9dd9c5391d53c93d
SSDEEP 1536:LG/UwyI2n/znKjm0+gZC6LxhL1Xd3tb0uSrFH:8jsvd6A
MD5 SHA1 SHA512 SSDEEP

Theogonical19/Dialectally119.udb

SHA256 38947bdadebf7833ead2027bc1c88201bf48955cf06ce3fddba5310f1741d8d7
MD5 54a8a1c4d6d989c57da8b42f08e605c5
SHA1 e8de85977bfa4b3df3d275ebcb4eb9df47939cba
SHA512 9774f6c70067fd19f7c094faa42b1e96628747fcaea6e3b6a1c3f9c54dc1e7e6225a955afc828c66d9e2c32f72af99c2d969f406b2f55372233b440e3ae46595
SSDEEP 768:807l3rwWO6bvtfLHFb1ocC0LhCF9V3CFpgMegj09P3CcoucnK0bNcv+X6Vmqab7H:fzKHYKiNigF
MD5 SHA1 SHA512 SSDEEP

Theogonical19/elixir.aut

SHA256 9d1157a597b3116fd2990e2e71bb91a7e84e68729cb3e04b55233f8bf70bf7c4
MD5 c3632a9dec09fd0d4f536b9efd58b49e
SHA1 a2cf8fc6cd59bd6673a8959aad67f4f48b18692b
SHA512 ce9c87e3d43225ecc5764cb34f4f1ac516b3d967659f07ed551f8cef52b0d1913b36004edda8f21a308f2001beab014b4a22f0e8bdd63ad3bce172e0a763a7a9
SSDEEP 768:kbrS7qeC0bzjvmyGRwsO+LfVR7zHgYm0QlC2X6vTf7Pf+8SsYsDbvXf/qHe3rwM0:dzj0fezQ
MD5 SHA1 SHA512 SSDEEP

Untimid/flakkeriernes.txt

SHA256 9e6733e801ad04ca28aeb4e6967f6de7734f0ca7869f186bcb5faa8ce178e560
MD5 a3fd1baaadc43df76c6899220da6bb56
SHA1 1293d7506e36a6fd35f7583dffedae88e9e16e9c
SHA512 69c488564e8cbd391896e5d50aeec9ebfc6cc2db336426f9565ffbd9726087a7f3e85b52bc36520bbc091769f6151d82540cd82251bf6417e9b0cf4d9e61ee0b
MD5 SHA1 SHA512

Untimid/uplifted.pre

SHA256 78f30379e9c1edfdc44e336e0a166eaa99c16b3856ff2a3175ed56b5eb8ae181
MD5 0e2ba329bb47fd21811ad21526435716
SHA1 8db35edd9292382d380fa9b0427883287f0c784b
SHA512 883377181bbcee437caac857c89b81a422109c2d4480440f14844061b7da30aafb0906ec725b8da2bcec61cd6578c0b12684619b5a1ea8e825772a40c5e93e89
SSDEEP 768:TQYvwGs1eA9YYC0jg+KArMMVvbGZm3QMYOTX/EF5Oo0l2Ulm/0pR:cd7
MD5 SHA1 SHA512 SSDEEP

fustigations.Mes

SHA256 f016dcd78fc844631a57e153aeb8124ac06b8bf54949ee8e7edfb89809646b50
MD5 841b4410bfce1d0bdec22711735b0b61
SHA1 9049aaf1d842e14ca0127769d235fd0f98853cb3
SHA512 01ab69392b875379af07695d2b3915e8e37e1e4f311c1040347aa8c8ea0a4b5fcac1f1a83ffb6f76fd28dedefd7ab3de3634bac5815e7b3a785c1dbc9a14fdab
SSDEEP 6144:BT70ZhWYFMKaCQ7o6YGL8MUYyJ8g1DQ8mAsJ7BKdztsxqQ:BT70DMKL9UpUnJBQTBKVWxqQ
MD5 SHA1 SHA512 SSDEEP