REVISED INVOICE[.]exe

REVISED INVOICE.exe

IMPHASH d4b94e8ee3f620a89d114b9da4b31873
SHA256 d2320e5704e90bc713c59a0521bacf04ca5751c2481e1dd4e3a95494981d867c
MD5 8274b1a41b53bf35e0b4330a20010d4c
SHA1 0b263f01dd3e10389cd4fe6575d114ea301ee874
SHA512 727ed4fe93c9f0da19df61b81d3f92a9ddc9b6680b2ac841e1ed3ed37bbbe7ecc4a628dfddf31429d2fb5034edd6bc7f742a84f6e76fe7f7401dcd98ea3ec644
SSDEEP 12288:KBu+je2mGYUNpeqzfAOKUXWkP/8KYfNrnEoYhJLAMhuwIm/toWyqTnoXnPolxsq8:D+63cWqv3nANr8xAGuwIm/yWiopvC9wG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

9a:19:95:54:15:fa:3f:c1:6c:4c:c4:62:f4:54:3c:cb:4c:4d:3e:2f:55:2a:42:a6:b1:0a:5f:be:1c:95:d6:69

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Radiotelegrafisten,O=Radiotelegrafisten,L=West Walton Highway,C=GB

Chains

Oct 21, 2024

Minor OS version

0

Major OS version

4

Entry point

12906

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW LoadLibraryW GetProcAddress GetModuleHandleA ExpandEnvironmentStringsW GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle GlobalFree lstrcmpW GlobalAlloc WaitForSingleObject GlobalUnlock GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW GetDC SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow LoadImageW SetWindowLongW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint SetTimer FindWindowExW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Hyperclimax.Com

SHA256 f79002317d2a561e589e0006dd549d39c71488689ce772b15f84f393926a2786
MD5 6ac57b58205d75aee6380c3c6a8ef2a2
SHA1 466480b2a43b6c6dd95253849acaafcef82ca2b3
SHA512 ea0dea24679edb7b4d10a62e23d52bf8102338bea90957f27adc92228a54bb0b49bb710b2ed9a159b48eb5ad1a353fdcefb311a2569a82d1bed17f8f4e7782be
SSDEEP 1536:uEy/BE4CCwPB+92TmVYkP/23ytqHO0Trmd/jK:g/BEhC2M23ytqU2
MD5 SHA1 SHA512 SSDEEP

Smudgeproof.Spe

SHA256 2f9c4d11c84da12fc93d685d8a1cf99f0b7c9fe42d50bcd56e08d6e4b2a8014b
MD5 02093bf4e23f0dc4ed17ace33f3071c3
SHA1 ff8e59ee5eb06847411f0f11319081acc6510f8c
SHA512 41f9d4a882d570da60724494d64dab81c2cacab90b90b44ce5ae4726bd6dfaabf5c3e6abf358575b3f321b62dbd7fcbc0788c49c135f511e5be7826bda6426ca
SSDEEP 6144:s9f0Im/HiUPjZ0G2tKMrEX+s/jxbUznOpzWcILjNWgeN7yZw0:kf0Im/CYjZZwJs6zOpCcejNWgOuX
MD5 SHA1 SHA512 SSDEEP

Underbeat.ops

SHA256 655e599a68ec316400412338207aee3d1e92d871d44903330831863a8422ded6
MD5 26c2167385af5f3ad4501dc9eb1d1750
SHA1 dc579f120929feb6743a2e708b1ecb80ab5743fc
SHA512 3a5a916cd1d62017c0cb1df2dd0e4162e1d65f7fc7b3f6910fc5476d75522bcbca14a4b8bbb581a29d090e5cb624563b6d55bece6663866e2d5003dba3d32868
SSDEEP 768:0zQkaCkKFWCIXNc4VzKCrtjqcgRnPnpPhxpTF1HYRT78IvzOa0X8Y7/gTggxDFJp:icoCXuttGE6uCCi4amVuAE8M
MD5 SHA1 SHA512 SSDEEP

chultun.sed

SHA256 042ca82320646ff84d77486db582121776cde3a7512aad331c52a6f7f4477f07
MD5 7e5d0c2fb5542434deaa7cb9992cf70a
SHA1 88c1347b18718ddfebe207b0142337aa058088e1
SHA512 ecaffc3b8e35e933ba34d9b4e8faa23f8504cb7e3eb749c8ba6329e35b9a9983c92d5f6361eefaf408eedb134c65cb71e1e9bdd7bbec01f63cff18b02b4e9caa
SSDEEP 768:R/4C648E1cMH3VW/bm9QbMUw48AwMj29nPxjeUdd5Q7a2lUsNEsoUILUeGjYG2lr:x/9qJoJnheHT4tVHiQIrOKKH
MD5 SHA1 SHA512 SSDEEP

elapoid.lux

SHA256 e960c13536eda3b4833cdc97de94bd4505ebb2bde345f8301108d7b02a6c3695
MD5 e2c31508d144e6c8890bc5de64dbc952
SHA1 358fe8ff69899e52d55f9a22df5888bc2f53e04a
SHA512 1147f2f1a552810b498623c4a8ed9dec8a2897d49fc3672e89ba208b748076dc252b96500599f5f00805b41ae3c495dc26ecbf1484dc2e4c402ffb061f6ceeb0
SSDEEP 1536:xvceOaoCvXM6v7bWOSNFacQ8vOVOpLEaCJ:hp7v8yGVYcT
MD5 SHA1 SHA512 SSDEEP

netadressers.hul

SHA256 fadfb5887ae6b54c07f264798945b3d33db6ec9a9a70c26b585149ef5e8ce972
MD5 7b108eeec00b60944878785541310b37
SHA1 18679f477149cf4571d581fe5f402c2320b31059
SHA512 d5e9c23e01a18fdc9be811252cded78649f1f8cd48c5f5bd8fdd1d6ed5aa29fe28e21b15705eab4caf743beb7ed49b0dda8439e9b40600d6715da5b5c55ba775
SSDEEP 768:NkcVLfyGsqWRxaFZcdE9c64XSMZBiMfg4EPcVdq9/aEeOD0CbLW/+Kf1BMwhindh:uPJSls/7dB0cDseO+yaKz1aWYlS6wTc
MD5 SHA1 SHA512 SSDEEP

organets.ind

SHA256 807fbb6ef44b4d318dbba4ab3b4818e1000a2abbeec1a82eb6010a169c8f4541
MD5 535051a54b823e39736d2b2f2aec56d4
SHA1 07507b4404013195f3a7262bbeb84afb9ff73044
SHA512 23a36eacf7be30f63eccac748f9e1ae7bfa1c3046fbc21de229997c313aac7e0cd2d50fac15710b2542010511d9a7c192da7ec722536421d032113c034e652d7
SSDEEP 768:77uewIGU0VH/DujWmCpJ0oY03RZ2bp7Cb5j1AnvZwr2KbwXf+O3ThTnDrQXaUp+g:nu5Q4pn5ixn19nHIjHLyzaouVsP
MD5 SHA1 SHA512 SSDEEP

politurernes.jor

SHA256 be5de0aca1ac614a1f7ee90cb06c629778d368785317af8531dbffc946ac5d97
MD5 8403f4e4069e57fa2af93bb477ec2f5b
SHA1 f52f9a97b6fe053e998f33c8d7dfebb858e30db7
SHA512 960ac24bf4a08d3659b2c0551826bcb4a54ef99cc1c879c15ffbb023112f54b867d31e901ec121da0649019487adc206b42bd28de13a01306abdcdd14a4ea39d
SSDEEP 1536:VgA+/Tb3OXWuT8THf/Ff+PaQ1LLI1xFOYUhd:w7b+mZlf+PaQ1c1xlO
MD5 SHA1 SHA512 SSDEEP

prior.txt

SHA256 ad0681420c18cf905f792608b5313422142d34a7984283d47fbe5aebee2fcd50
MD5 7875b155deaaf5ae952f60a1169b67a3
SHA1 09eb123fc93cda5a858c436469d32b0e251789ce
SHA512 17dff3f236ed9a5ef45d8c8008d6cc6f8ab080e272669cc5b23869d6ca6dfdb2e483dd517c6e479238cbe48c95bff528abc46896075a49e4249d908853bfc9ac
MD5 SHA1 SHA512

testprocedurer.syn

SHA256 feb96aef8bb072a8e8472a19508b424d04159389e1ea55da73da22c958100963
MD5 b36381c40d4a5d90c8b2e712830d6634
SHA1 20e8d57dc3b4f524727c115b48a176dba40a24aa
SHA512 53e4aa268cd0d8f92d504920ddc7c9b67d8ba3a1d83779a0d6ef48e317d0a8e45434838a14b93d39e888032040a1671dc2d9b2cabb77b624d3048d1f6613ddee
SSDEEP 768:iJxIWpDKZPWmn4EdlkbOKLvxy1xvacN7wSYpg5ZPifFQjkuIphGOod/NQfFFQgtO:9WpcQvAmccQNa2NgFnhRxMGFwvHILy
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer