2702bb251c14965787b39f03a9c41000b9b0421528578e5a6a221ad8b27f182d[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

2702bb251c14965787b39f03a9c41000b9b0421528578e5a6a221ad8b27f182d.exe

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 2702bb251c14965787b39f03a9c41000b9b0421528578e5a6a221ad8b27f182d
MD5 2c5483106fe248cced82541b91cba20e
SHA1 41e69017b26287ee7814bb35a967672ba58cb714
SHA512 4ca40026e8dc3da75c7e68334d268d5b08f568259e597af1fabbd1586f4aaf05c716e17d0bf4c88b68f765fab6ead6965afd73ecb0ead8b97d3ea1fd55d60130
SSDEEP 12288:4aqrw9z7Or5X16gS7U5XzJocC/Uisrk9qKyzpqK:5Kw9zar5lxYUtz2cC/lqVpqK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1a:48:3b:f4:38:e6:db:85:97:24:d6:42:2b:39:de:22:c3:fb:26:03:1b:7d:73:ca:e2:1c:1e:08:49:d9:56:c9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=binmen Aerophile\ ,L=Whipsnade,ST=England,C=GB,1.2.840.113549.1.9.1=#0c1246696775726572404d69646e6f6f6e2e4675

Chains

Sep 30, 2024

PE Signature issue

Digest

ce:f7:9b:0f:6c:1e:86:2a:95:9f:66:70:cf:c8:f0:0e:83:26:cc:3d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=binmen Aerophile\ ,L=Whipsnade,ST=England,C=GB,1.2.840.113549.1.9.1=#0c1246696775726572404d69646e6f6f6e2e4675

Chains

Sep 30, 2024

Minor OS version

0

Major OS version

4

Entry point

13449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 f004c568d305cd95edbd704166fcd2849d395b595dff814bcc2012693527ac37
MD5 8b3830b9dbf87f84ddd3b26645fed3a0
SHA1 223bef1f19e644a610a0877d01eadc9e28299509
SHA512 d13cfd98db5ca8dc9c15723eee0e7454975078a776bce26247228be4603a0217e166058ebadc68090afe988862b7514cb8cb84de13b3de35737412a6f0a8ac03
SSDEEP 192:ex24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlESlS:h8QIl972eXqlWBFSt273YOlEz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Bugvggens/Fyrstendmmer186.Hje

SHA256 b4b4dd4d573fe0f78fadad65ae104aea7e7237414b0d7430691fe75d57243399
MD5 9fd1449b3fe19bb534f0eb4492f90bcf
SHA1 543398f96d8e44f2e6d84767ea7b63afff762cf4
SHA512 bf74461bd40e2276170903a3d352a98c79edb7f3de1e1b2c220faffdbabd5744d3ef1dd2bbba8c394f61937d9b6c477022cc54835f19d6cd84a554c7aff2982a
SSDEEP 3072:IDjEODVJUk6F2MnnHRmmMrpz65eXlpKF0Zo5Mj0IOsC8G5f4X:G/DTsRHd5eXlpA5Mjfg8GG
MD5 SHA1 SHA512 SSDEEP

sludrehovedet/bushers.txt

SHA256 3bf02f982a76a4c896fda78c1c4b2b730d690dd86475213dc415269d4629407b
MD5 b33890a43fb0f38b6ddf18c5bcefe234
SHA1 80ed178a92c2b5cb530aee4673ffc9011ebf86bb
SHA512 169e2d067337bf05ba08d615ce61b28ca4fd93d204966b3386fb4b373d9bacd689bee3ddc5e04a4f19586e585263f62bc40b0944a10e5867c63c9c7236a5cc48
MD5 SHA1 SHA512

sludrehovedet/mississippi/Semolinas.Fit

SHA256 2c2e91a87b41d74f121d2ea5d92bfba0c802028f297e32894c34a3dfb28fdc3a
MD5 0c22814bb5a9b974ce322212ef915a81
SHA1 5b0bb3f2f3ba28d3026a9c0528a91e533993a5ad
SHA512 8a6db227cedeb8862910defcc64378bd0de5c6a7ea9479e6bfc02419ff4883f15de4f5560232196041cf732a3effe5e8ae2e7bef1e7e0fb2ca3209c7ab07c769
SSDEEP 1536:zjFc1Ku+6ADOlig8DEq4a/LERvjSJCphiN5zCPS63cNg6KW0E5hF/vnYXW2ngfMl:i1vAd6BqP0oheUCH3uK4DEEEhH
MD5 SHA1 SHA512 SSDEEP

sludrehovedet/mississippi/meropidae.kej

SHA256 0628fa8f44795d79d5b855e8387985e04d134e8b57fe4d57e663fbaed278df89
MD5 0071dc51c79f0655f0bb77074d56b1d7
SHA1 9617ae1434b07532baaf39d69cf720c05b85e8f9
SHA512 e2149e9f3b18dcb50e49ec51226d7a6bf3969e119b385410e80e431024b25a938c965c743d80c0c1d8a3820d0ddda14464cac75f73ae22f259b447264f8431ba
SSDEEP 768:q5eLWls2nEEvz9mAEPesDf7zRhfRKrtTgtOnumyYJBW+JAILJcqhOzwnasNP2r2J:q86nLDJnJuki2BaFsfRz
MD5 SHA1 SHA512 SSDEEP

sludrehovedet/mississippi/plastron.ori

SHA256 c19f7b3f1a20e1529113ee69aa53db6e124a51f03098e6fb6af0e76037c85b8b
MD5 7ba8e260d6477b4fd16dae2d14ea4482
SHA1 16873cb5bfba899d4ed937603aa9980f119695d6
SHA512 ecaa786515c73b08a44c22fd48b205166611750ec633849823a88bbf95a675ca29fb7f22e652efcfc055fc92f8381fc6276f4b732f91612a2385bf670131fff2
SSDEEP 1536:8IfJmHKeJzuGrd0myk0Ek5rFnJd62xZ9WEmaslkcO:8omHKAJR0T8axr
MD5 SHA1 SHA512 SSDEEP

2702bb251c14965787b39f03a9c41000b9b0421528578e5a6a221ad8b27f182d.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Bugvggens/Fyrstendmmer186.Hje

sludrehovedet/bushers.txt

sludrehovedet/mississippi/Semolinas.Fit

sludrehovedet/mississippi/meropidae.kej

sludrehovedet/mississippi/plastron.ori

Sharing

General

Malware Config

Signatures

File Explorer

2702bb251c14965787b39f03a9c41000b9b0421528578e5a6a221ad8b27f182d.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Bugvggens/Fyrstendmmer186.Hje

sludrehovedet/bushers.txt

sludrehovedet/mississippi/Semolinas.Fit

sludrehovedet/mississippi/meropidae.kej

sludrehovedet/mississippi/plastron.ori