FACTURA Nº A 178 CASES XALÓ S[.]L Nº 17102024 REFª MARQUESINA MOLÍ DEL GINER[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

FACTURA Nº A 178 CASES XALÓ S.L Nº 17102024 REFª MARQUESINA MOLÍ DEL GINER.exe

IMPHASH 7ed0d71376e55d58ab36dc7d3ffda898
SHA256 24de759c141ec60a2d89352e581ccc47b83d0240702283903e8cbdd1d9745265
MD5 e094f4ca0bcf4795c43c37b71cd65001
SHA1 dbe62e4ab2ba669fc5670b2aacbefca1784798f4
SHA512 40d8df1697890ad77cbe6bb4e47cd111890b4ed4f99abbd984dc0341b006ec947c0af37e951852a2fa32c8562e1085060a1e14d677461ef2a773ba88f92696fb
SSDEEP 24576:vbDc7+6xit+u3UjQqNATwJe9YESd4+/dD+la:vbDcUxOSBdSd4XM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

42:f6:a2:52:fa:34:30:ff:9e:a1:be:53:3e:d8:31:f0:b8:b5:89:5b:23:7f:09:68:54:78:8a:8e:d6:da:f1:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kortestes,O=Kortestes,L=Outreau,C=FR

Chains

Oct 29, 2024

Minor OS version

0

Major OS version

4

Entry point

12841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathW SetFileTime CloseHandle GetShortPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError GetFullPathNameW CreateDirectoryW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW SetFileAttributesW ExpandEnvironmentStringsW LoadLibraryW lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW lstrcpyA lstrcpyW lstrcatW GetSystemDirectoryW GetVersion GetProcAddress LoadLibraryA GetModuleHandleA GetModuleHandleW lstrcmpiW lstrcmpW WaitForSingleObject GlobalFree GlobalAlloc LoadLibraryExW GetExitCodeProcess FreeLibrary WritePrivateProfileStringW SetErrorMode GetCommandLineW GetPrivateProfileStringW FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar WriteFile lstrlenA WideCharToMultiByte

user32

EndDialog ScreenToClient GetWindowRect RegisterClassW EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData wsprintfW CreateWindowExW SystemParametersInfoW AppendMenuW CreatePopupMenu GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage GetDC SetWindowLongW LoadImageW SendMessageTimeoutW FindWindowExW EmptyClipboard OpenClipboard TrackPopupMenu EndPaint ShowWindow GetDlgItem IsWindow SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegCloseKey RegOpenKeyExW RegDeleteKeyW RegDeleteValueW RegEnumValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 5a1c20a3e2e2eb182976977669f2c5d9f3104477e98f74d69d2434e79b92fdc3
MD5 7399323923e3946fe9140132ac388132
SHA1 728257d06c452449b1241769b459f091aabcffc5
SHA512 d6f28ba761351f374ae007c780be27758aea7b9f998e2a88a542eede459d18700adffe71abcb52b8a8c00695efb7ccc280175b5eeb57ca9a645542edfabb64f1
SSDEEP 192:eF2HS5ih/7i00dWz9T7PH6lOFcQMI5+Vw+bPFomi7dJWsP:rSUmlw9T7DmnI5+N273FP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Gingerbreads/Packetize/tyktflydenhed.ove

SHA256 8d2a30cfc7f37eb7df47bfd3a5139f970a8e541504b808353ac7d4e5c43eedf1
MD5 03c8b52923bad9659d7300d16e00a1b2
SHA1 c0d6529ea5688422e959967c79aacc448a1a00f7
SHA512 d1b1c381afa2104d8fa900ec98d03d413337d6ca72e9c06b09eaeeb6220639d7eb3bd75a5c1a8e4e5df4c1e3756d1b9f1c4172d1fed7b8fa86be42f046bee1f4
SSDEEP 768:OfMzOzm3hXtnegwJKA/t84tdxaDekd6G2j34LKc0K2S2OixJ2uMP6a11b1OBXnQe:Dqb/xsbalfmPN1ZOhvDDEDptVYLiE
MD5 SHA1 SHA512 SSDEEP

Gingerbreads/Prostituerings.pul

SHA256 446c5d4c61fadf7ce6443b8078f6b48dabb52b5d79c47b5688352be14cd267e7
MD5 5dee2f4ac69719ec21a77f7885ccfdb7
SHA1 5622658979460553d0751322f2a41a65c4086ca0
SHA512 845c4c1b5c10553c949b26fb3c61a55a702848d256487b5b280f376cc36631f8c4650dad6cbe013ccca06792f316433f8228e2cab8bdfc3a0453eec45fd95e21
SSDEEP 1536:/mOJ/3pPaIWTJCQt5poF25UNeZ9wKLjszmrL:1Z3pPW5pRaIZ9wKrL
MD5 SHA1 SHA512 SSDEEP

Gingerbreads/Taxless.soc

SHA256 8400c18d0c30128368514f70405de9cb719a2f6f97b92f9fb292762e9626fe93
MD5 491e989d64439845762f5f4b49c45e7e
SHA1 5247d84155fc0622249d91653fa9a18ec3f4f8c1
SHA512 9d0e37caf73d19157c6fbe2736859a41f20dded7afa4269083f1a0840383f9943d4d0b2717d783a77dff634edca4248bc6e210f94bf7f06a01928937d4dcb6db
SSDEEP 768:iox3vIWbbnnmzgswnhACmnnny6+b3HQVVz0nezRxNzMO9HJ0ZYlfXMMYcxiIGgKt:ieDuBnpfXrx4I/jP
MD5 SHA1 SHA512 SSDEEP

Gingerbreads/Tripenny.cop

SHA256 81b8936e55b248b213493700d27d13cd723dbb94d255ba266dc16e89a70b0c66
MD5 336988c512cafc63dbea7bb43b128bae
SHA1 019a1bcf35d321ec1d825f2651f2c6a5d63c7666
SHA512 de50e2bd648e9be5f6c2d29b0de064a2d6d75af17469bc9b54c1b90ff2a0cc86f3eea3ea51f9378a78f3792bf2e59441a1af16abaf6ddceb8837274ffa1d7860
SSDEEP 1536:BISQ8vKf2N5B3V5nWHY9oq8PR9WHXxCqVxIigaIUBheJ:B1Q2FvWHYSq8Dx51/
MD5 SHA1 SHA512 SSDEEP

Gingerbreads/populariseringers.dis

SHA256 1848400f0d328efd451143c3bdb8a917b913812dc925dadaff51e10ff6e12c2a
MD5 1855e5b92348057024c111fcfe124ca9
SHA1 1991e9ef414c0724e2b82c92f2e049c08e9db40d
SHA512 b4c680b986c3b8d27483ba0a491b7ccceea979abce68e523404c084bbb075c55768cf8764cb91d56bc4be78d6b29c01cbf7466da61a2b8c13333d70c96e1841e
SSDEEP 768:A+avzrbXbO/HPb/yPx+UxycHWG3ctGIz1cjwnbdCYfj9E8DcIkuvkfbrFB2EgsXH:kuPgTxaRX44rvknFB2EvQhIgTt4SkB
MD5 SHA1 SHA512 SSDEEP

Gingerbreads/siouxs.kas

SHA256 e67910991c762f72dc204ee84aedc62b96309c6b8badd804c02dc6469f195093
MD5 530e0d2de2dcf2e54d43c9ab383bd76f
SHA1 8d965e216c775f3e6a207211a19768c6ed92bbe2
SHA512 1f82f6f9984ad8fc3a09510a5b55d3591880d40ed844bd2d4b3bc4ee4e6b57b736d9b8090d9c3faad4678b33cca762b8a62faecca1f9af0461166d156f579432
SSDEEP 1536:cE4OZIYEFFRyjxDpSP2mdRB1l1u5LKRLrs2c:7fZIfyjTShB1oLKVrs2c
MD5 SHA1 SHA512 SSDEEP

Gingerbreads/straffelovsovertrdelsernes.txt

SHA256 c21d47d9800a5ab9b033daa470c23cb91d50fed518b11c837549e3f253435231
MD5 447fce78047fb6da6369c363dc4fdd78
SHA1 24f96febf3647a0492278b4629c24528adacc760
SHA512 03f2e2a0f7539a7cc70486e34a5938da98899e240546ff92e2237a1b52f526a127514c43186c686c71b558e99db05ad0fd21606d0828b260ed6b3d157fc31cf7
MD5 SHA1 SHA512

Sunsetting.Per

SHA256 d60c82796d80c653abb2bd93f983644c465be0d778af2410368a4a5cb9c438ae
MD5 673b1ea373bee3e3e7c284def0520e20
SHA1 3051bb3d629b16f0e1e227b756df516f16c329ca
SHA512 7007abea79c1da5521464237032569a9f837c2bef824208d8d146354000e96265431e4a4e607af8f79fe4b6a34837c094ca90aae9c5a09437fdfd7cebbb54993
SSDEEP 6144:wIZzDbUU29lXHtQZg9bPhSBe8y3tAxoYwDYh:wIFkt9lXNQCphSBStCZx
MD5 SHA1 SHA512 SSDEEP

FACTURA Nº A 178 CASES XALÓ S.L Nº 17102024 REFª MARQUESINA MOLÍ DEL GINER.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Gingerbreads/Packetize/tyktflydenhed.ove

Gingerbreads/Prostituerings.pul

Gingerbreads/Taxless.soc

Gingerbreads/Tripenny.cop

Gingerbreads/populariseringers.dis

Gingerbreads/siouxs.kas

Gingerbreads/straffelovsovertrdelsernes.txt

Sunsetting.Per

Sharing

General

Malware Config

Signatures

File Explorer

FACTURA Nº A 178 CASES XALÓ S.L Nº 17102024 REFª MARQUESINA MOLÍ DEL GINER.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Gingerbreads/Packetize/tyktflydenhed.ove

Gingerbreads/Prostituerings.pul

Gingerbreads/Taxless.soc

Gingerbreads/Tripenny.cop

Gingerbreads/populariseringers.dis

Gingerbreads/siouxs.kas

Gingerbreads/straffelovsovertrdelsernes.txt

Sunsetting.Per