malware-collection[.]zip

resource	yara_rule
static1/unpack001/#10302024.exe	autoit_exe

resource
unpack001/#10302024.exe
unpack002/$PLUGINSDIR/System.dll
unpack001/103024_37663.exe
unpack003/$PLUGINSDIR/System.dll
unpack001/240827 YONG SHUN - GMDSS.exe
unpack001/AWB #281024..scr
unpack001/Produccion.exe
unpack004/$PLUGINSDIR/System.dll
unpack005/$PLUGINSDIR/System.dll

malware-collection.zip

SHA256 9711e0f1f4b1ea97ecf7ddfe05b27c8f712533c2141f6e2b064d636076e76652
MD5 27023b38ea750270fcbba58aca2b0a63
SHA1 5929d8c60a6f076178fd79884cb472124b5e0950
SHA512 7999f40bd74733de62af8c7f2a74b7de02ddbc244f97c13c4ec1ec8cae004b94a607b64e0d4d558858cb9e0e91c1ebccab9b3c1ff65f0e84f3ff26be0901bf79
SSDEEP 98304:jSyt/B7v5M8DuR4KL1DMLTnnvGZRX3PlCdHpeaOMSe0EfARTZs8sJ2B8FQXY6+f:Wyt/BTuFWLTnnvGZRvzR7Cfuz8FGk
MD5 SHA1 SHA512 SSDEEP

Password

infected

#10302024.exe

IMPHASH c4540f421523fe2dc591e50be5ad7d0b
SHA256 a131f667cc1c8ab17777294ffc556a8b45dd726452ccc10d716daa39d256d3a6
MD5 432523c2a91f208ce00e9aa553c25883
SHA1 00fc307df8d7970dc4ca4c9f786d025d1032aeee
SHA512 7a1e1f31b79bb9eff8a7463b7bb40aeb837584c990bce85b6189c07597c6bc12e17fecd1c09f53b163640b9f5e36cf6968c19499a7bf8a6d9210c9523361b31d
SSDEEP 24576:NqDEvCTbMWu7rQYlBQcBiT6rprG8aIkLEdvEkGI66/aVKJvoWXrVTSNa:NTvC/MTQYxsWR7aIkwdvEkS6NlrV6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

AutoIT Executable

AutoIT scripts compiled to PE executables.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

132471

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

gethostbyname recv send socket inet_ntoa setsockopt ntohs WSACleanup WSAStartup sendto htons __WSAFDIsSet select accept listen bind inet_addr ioctlsocket recvfrom WSAGetLastError closesocket gethostname connect

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

winmm

timeGetTime waveOutSetVolume mciSendStringW

comctl32

ImageList_ReplaceIcon ImageList_Destroy ImageList_Remove ImageList_SetDragCursorImage ImageList_BeginDrag ImageList_DragEnter ImageList_DragLeave ImageList_EndDrag ImageList_DragMove InitCommonControlsEx ImageList_Create

mpr

WNetGetConnectionW WNetCancelConnection2W WNetUseConnectionW WNetAddConnection2W

wininet

HttpOpenRequestW InternetCloseHandle InternetOpenW InternetSetOptionW InternetCrackUrlW HttpQueryInfoW InternetQueryOptionW InternetConnectW HttpSendRequestW FtpOpenFileW FtpGetFileSize InternetOpenUrlW InternetReadFile InternetQueryDataAvailable

psapi

GetProcessMemoryInfo

iphlpapi

IcmpSendEcho IcmpCloseHandle IcmpCreateFile

userenv

DestroyEnvironmentBlock LoadUserProfileW CreateEnvironmentBlock UnloadUserProfile

uxtheme

IsThemeActive

kernel32

DuplicateHandle CreateThread WaitForSingleObject HeapAlloc GetProcessHeap HeapFree Sleep GetCurrentThreadId MultiByteToWideChar MulDiv GetVersionExW IsWow64Process GetSystemInfo FreeLibrary LoadLibraryA GetProcAddress SetErrorMode GetModuleFileNameW WideCharToMultiByte lstrcpyW lstrlenW GetModuleHandleW QueryPerformanceCounter VirtualFreeEx OpenProcess VirtualAllocEx WriteProcessMemory ReadProcessMemory CreateFileW SetFilePointerEx SetEndOfFile ReadFile WriteFile FlushFileBuffers TerminateProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW SetFileTime GetFileAttributesW FindFirstFileW FindClose GetLongPathNameW GetShortPathNameW DeleteFileW IsDebuggerPresent CopyFileExW MoveFileW CreateDirectoryW RemoveDirectoryW SetSystemPowerState QueryPerformanceFrequency LoadResource LockResource SizeofResource OutputDebugStringW GetTempPathW GetTempFileNameW DeviceIoControl LoadLibraryW GetLocalTime CompareStringW GetCurrentThread EnterCriticalSection LeaveCriticalSection GetStdHandle CreatePipe InterlockedExchange TerminateThread LoadLibraryExW FindResourceExW CopyFileW VirtualFree FormatMessageW GetExitCodeProcess GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileSectionW WritePrivateProfileSectionW GetPrivateProfileSectionNamesW FileTimeToLocalFileTime FileTimeToSystemTime SystemTimeToFileTime LocalFileTimeToFileTime GetDriveTypeW GetDiskFreeSpaceExW GetDiskFreeSpaceW GetVolumeInformationW SetVolumeLabelW CreateHardLinkW SetFileAttributesW CreateEventW SetEvent GetEnvironmentVariableW SetEnvironmentVariableW GlobalLock GlobalUnlock GlobalAlloc GetFileSize GlobalFree GlobalMemoryStatusEx Beep GetSystemDirectoryW HeapReAlloc HeapSize GetComputerNameW GetWindowsDirectoryW GetCurrentProcessId GetProcessIoCounters CreateProcessW GetProcessId SetPriorityClass VirtualAlloc GetCurrentDirectoryW lstrcmpiW DecodePointer GetLastError RaiseException InitializeCriticalSectionAndSpinCount DeleteCriticalSection InterlockedDecrement InterlockedIncrement ResetEvent WaitForSingleObjectEx IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess CloseHandle GetFullPathNameW GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer ExitProcess GetModuleHandleExW ExitThread ResumeThread FreeLibraryAndExitThread GetACP GetDateFormatW GetTimeFormatW LCMapStringW GetStringTypeW GetFileType SetStdHandle GetConsoleCP GetConsoleMode ReadConsoleW GetTimeZoneInformation FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetCurrentDirectoryW FindNextFileW WriteConsoleW

user32

GetKeyboardLayoutNameW IsCharAlphaW IsCharAlphaNumericW IsCharLowerW IsCharUpperW GetMenuStringW GetSubMenu GetCaretPos IsZoomed GetMonitorInfoW SetWindowLongW SetLayeredWindowAttributes FlashWindow GetClassLongW TranslateAcceleratorW IsDialogMessageW GetSysColor InflateRect DrawFocusRect DrawTextW FrameRect DrawFrameControl FillRect PtInRect DestroyAcceleratorTable CreateAcceleratorTableW SetCursor GetWindowDC GetSystemMetrics GetActiveWindow CharNextW wsprintfW RedrawWindow DrawMenuBar DestroyMenu SetMenu GetWindowTextLengthW CreateMenu IsDlgButtonChecked DefDlgProcW CallWindowProcW ReleaseCapture SetCapture PeekMessageW GetInputState UnregisterHotKey CharLowerBuffW MonitorFromPoint MonitorFromRect LoadImageW mouse_event ExitWindowsEx SetActiveWindow FindWindowExW EnumThreadWindows SetMenuDefaultItem InsertMenuItemW IsMenu ClientToScreen GetCursorPos DeleteMenu CheckMenuRadioItem GetMenuItemID GetMenuItemCount SetMenuItemInfoW GetMenuItemInfoW SetForegroundWindow IsIconic FindWindowW SystemParametersInfoW LockWindowUpdate SendInput GetAsyncKeyState SetKeyboardState GetKeyboardState GetKeyState VkKeyScanW LoadStringW DialogBoxParamW MessageBeep EndDialog SendDlgItemMessageW GetDlgItem SetWindowTextW CopyRect ReleaseDC GetDC EndPaint BeginPaint GetClientRect GetMenu DestroyWindow EnumWindows GetDesktopWindow IsWindow IsWindowEnabled IsWindowVisible EnableWindow InvalidateRect GetWindowLongW GetWindowThreadProcessId AttachThreadInput GetFocus GetWindowTextW SendMessageTimeoutW EnumChildWindows CharUpperBuffW GetClassNameW GetParent GetDlgCtrlID SendMessageW MapVirtualKeyW PostMessageW GetWindowRect SetUserObjectSecurity CloseDesktop CloseWindowStation OpenDesktopW RegisterHotKey GetCursorInfo SetWindowPos CopyImage AdjustWindowRectEx SetRect SetClipboardData EmptyClipboard CountClipboardFormats CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard BlockInput TrackPopupMenuEx GetMessageW SetProcessWindowStation GetProcessWindowStation OpenWindowStationW GetUserObjectSecurity MessageBoxW DefWindowProcW MoveWindow SetFocus PostQuitMessage KillTimer CreatePopupMenu RegisterWindowMessageW SetTimer ShowWindow CreateWindowExW RegisterClassExW LoadIconW LoadCursorW GetSysColorBrush GetForegroundWindow MessageBoxA DestroyIcon DispatchMessageW keybd_event TranslateMessage ScreenToClient

gdi32

EndPath DeleteObject GetTextExtentPoint32W ExtCreatePen StrokeAndFillPath GetDeviceCaps SetPixel CloseFigure LineTo AngleArc MoveToEx Ellipse CreateCompatibleBitmap CreateCompatibleDC PolyDraw BeginPath Rectangle SetViewportOrgEx GetObjectW SetBkMode RoundRect SetBkColor CreatePen SelectObject StretchBlt CreateSolidBrush SetTextColor CreateFontW GetTextFaceW GetStockObject CreateDCW GetPixel DeleteDC GetDIBits StrokePath

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

GetAce RegEnumValueW RegDeleteValueW RegDeleteKeyW RegEnumKeyExW RegSetValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegConnectRegistryW InitializeSecurityDescriptor InitializeAcl AdjustTokenPrivileges OpenThreadToken OpenProcessToken LookupPrivilegeValueW DuplicateTokenEx CreateProcessAsUserW CreateProcessWithLogonW GetLengthSid CopySid LogonUserW AllocateAndInitializeSid CheckTokenMembership FreeSid GetTokenInformation RegCreateKeyExW GetSecurityDescriptorDacl GetAclInformation GetUserNameW AddAce SetSecurityDescriptorDacl InitiateSystemShutdownExW

shell32

DragFinish DragQueryPoint ShellExecuteExW DragQueryFileW SHEmptyRecycleBinW SHGetPathFromIDListW SHBrowseForFolderW SHCreateShellItem SHGetDesktopFolder SHGetSpecialFolderLocation SHGetFolderPathW SHFileOperationW ExtractIconExW Shell_NotifyIconW ShellExecuteW

ole32

CoTaskMemAlloc CoTaskMemFree CLSIDFromString ProgIDFromCLSID CLSIDFromProgID OleSetMenuDescriptor MkParseDisplayName OleSetContainedObject CoCreateInstance IIDFromString StringFromGUID2 CreateStreamOnHGlobal OleInitialize OleUninitialize CoInitialize CoUninitialize GetRunningObjectTable CoGetInstanceFromFile CoGetObject CoInitializeSecurity CoCreateInstanceEx CoSetProxyBlanket

oleaut32

CreateStdDispatch CreateDispTypeInfo UnRegisterTypeLi UnRegisterTypeLibForUser RegisterTypeLibForUser RegisterTypeLi LoadTypeLibEx VariantCopyInd SysReAllocString SysFreeString VariantChangeType SafeArrayDestroyData SafeArrayUnaccessData SafeArrayAccessData SafeArrayAllocData SafeArrayAllocDescriptorEx SafeArrayCreateVector SysStringLen QueryPathOfRegTypeLi SysAllocString VariantInit VariantClear DispCallFunc VariantTimeToSystemTime VarR8FromDec SafeArrayGetVartype SafeArrayDestroyDescriptor VariantCopy OleLoadPicture

102924_5830760.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 f392bfa146ad86308fa464a9505708645f99618d54483cbc6b746b656f26a3fb
MD5 f7fc33c3bcded454047a6bfaf99f1452
SHA1 a23a2448f373a4319fc0722b72595815d27c62c6
SHA512 0211b32321c50653fbf67190cd24455d997016f7cc9fe7e86457dfeda647ba326c2e0c2fa5d352a98ef4ec82724cd7ab50dc9988cb7e354f99623e0aa6740d29
SSDEEP 24576:pG+yftcZ0DbBTVsVQ7LE8oy9jRKta3uja581Cj:wPcZ0BuO7L7o/a5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

03:c5:2c:59:b8:2e:ef:44:ab:e3:d6:51:9d:12:8c:1b:29:18:df:c9:15:45:3d:38:ca:7f:f8:51:44:3e:f8:86

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Ijnefaldendes,O=Ijnefaldendes,L=Plattling,C=DE

Chains

Oct 28, 2024

PE Signature issue

Digest

94:52:b0:72:7d:0a:a9:80:b3:45:6b:8d:34:b0:f2:ba:db:cd:4f:90

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Ijnefaldendes,O=Ijnefaldendes,L=Plattling,C=DE

Chains

Nov 5, 2024

Minor OS version

0

Major OS version

4

Entry point

13615

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
MD5 192639861e3dc2dc5c08bb8f8c7260d5
SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Amyliferous/Antiluftskytsets133/fygningers.hom

SHA256 c65e4ff0b7a80e686858f6c34b686de908540ccde1a3ae5e627272dfc4e40d20
MD5 6e6832896907f1f51f42bae57ce341bc
SHA1 9294ac513b5968808be70f6efe2d027e7837b989
SHA512 bc04f0319512812e54a7e612991a7bd71feae1e955dafcaee407c835f70d1e1f4212e4085d123a046bfbfce2f96bf9dd80b456e308b11d0584e933fe6d456324
SSDEEP 768:GcJYS2pZ+e16MV4+KZgNQ97FkX/E+Lt97IkW3F4OvAPwmcMUoaFu4vMBUq2L0BQZ:/TmK4iiR6XUq0Qw1rfyivGfSopD6uH0y
MD5 SHA1 SHA512 SSDEEP

Amyliferous/Antiluftskytsets133/outchidden.dep

SHA256 510850d30cec95eb1a0bf4fca7b7f0113f0d4c42726b794efa98937af62a516b
MD5 3269394f73b2ada0574a74284d8b2e17
SHA1 8cc597fd67d71d56f489c2b970682d9ded1392fc
SHA512 a4bfaa7c52cf5ee5e9cdb900a3228a17109bfe46b08266dae3057f17a6eaaaab5dfd91dbb4833fa47fc961b5809fb41c340bcf82139acd7a4b9ab54df94351d8
SSDEEP 768:T2PLd1hgU1SmVlqVwusTqMdrtd5jsctJuIsiIZtRlAf9tpjc9GI+DFENhHiXP7yj:ad1euLPsb39GIqFruRChk
MD5 SHA1 SHA512 SSDEEP

Amyliferous/Antiluftskytsets133/pitocin.opl

SHA256 caebfe32548b8dc684aa35b144a20a99fa6f36692bed690de4900691a525da30
MD5 aee2f83a7c4c7f24701b741521fb2e16
SHA1 a8fefdb29a731112a30bb5e2b3ef87b89a6d0f3e
SHA512 075e80ac88843441e4b3a24d525dd1043aaefca9ebcb8c445e442c3b4f421c955a2a5a93d9e37327bb50228b81f2036c0d9842cfed7d186a05dabd5c211c3879
SSDEEP 1536:FCN4UE4Tjyohd/qCWOGtHCIFy58RqmA3I:FCN4GiVCuyuw3I
MD5 SHA1 SHA512 SSDEEP

Amyliferous/Antiluftskytsets133/umenneskernes.sem

SHA256 3c494d3a6f8e831560edcaf571f1aed0db2699d951dce31555ffc8eeb0c68e8e
MD5 9ec9f165c9e1d40a5fe69e13f4e40bb2
SHA1 4f35529eb907f3dd41d2f1c1f8114896b0049fef
SHA512 1f8bc071520584402be5692375f40af319914777ad3cf7caf4291d4281e4ff3eb18fee781f22c84f4336b8e403a21d59d8f4eecf17009da34d7da9b6b6eda14f
SSDEEP 768:5c8SYAdyufvUy3CuNMJAdaM+KCzP6QcG9wghZ0cL52j/i10qEDYiaXF44Xrrocc1:5hAdayyxFVZ64Xve5rsW4
MD5 SHA1 SHA512 SSDEEP

Amyliferous/Antiluftskytsets133/unikaer.kem

SHA256 7d67f05679b2132f418a353dc26498f79e93133c482b28d20ee18c3a83534b3e
MD5 e2123d8fcf95dd997b5b57c859952c42
SHA1 c57fa1122078b47a37e0d2fadd0abc4c2b8b6185
SHA512 1a5339d733b08a760be0d69162422a3a9199ac496d970a57050c3c009fe9ef47095ce2f4d14e6f96f7cb5e870e1caf8eafe2af4660fcec2aadead2884f27a27d
SSDEEP 1536:Rv7GJmqRTpKBSpacoAbleU7c0PReL6HSE1/hqQ79/:RzG5n7DRe+jqQ
MD5 SHA1 SHA512 SSDEEP

Amyliferous/Antiluftskytsets133/unimmaculately.bad

SHA256 f4190ee3362ce3585a4a921077c1ad14e895c80ad7d17455b55aac27335e2093
MD5 436f0693f85a9463e53fc25016a6e62e
SHA1 70920ff51c4e0caa612419ffb860fddc24f0b7c5
SHA512 cec32baf315ae9d3480d221e54503898e2eb31c5fd0b81a87852ad6ea566ba8584b0ca02d3e898c5cbb078f60b20efa490f6b2d8d4f1ed22169c8df2dc7bb392
SSDEEP 1536:9U42WMwaAJbj1SWgmYjFLw5pUEx6Yszh92PbGwT/:9UM9ffpcFLwYuHszj2Pbf
MD5 SHA1 SHA512 SSDEEP

Amyliferous/Baadmotoren.Geo

SHA256 d5e2e2dc7571a812b08ac556c175f23bdb83abdf0160a4101b0670e834e93dd9
MD5 f898fe59dc4ddfdf62192feee8e15230
SHA1 452f53cd2be9f599740371ef73ee6439dc562b91
SHA512 247cc61bdef0731f093ef5d3a1efb8c057a87ca5524a3750d2b7663662f989cd40551421973bf2fc98882317e43235a61a053d90e94f6e6f556f81201a9ceea7
SSDEEP 1536:CjeuMY6H5nEUWetVSG8/02hpWLHR5SqiNO5m2Ki7ohIyPUo35tlk5RKt:EeuMY6H9EUWr3h0jPSTN4m2eIycQtl1t
MD5 SHA1 SHA512 SSDEEP

Amyliferous/Varmepuderne115.poa

SHA256 673c982f75c3cdd0eacad35785fb01475d01964806072c2de8e4b011c8ef4db7
MD5 51b771910e4858e4e5cdd09df62f5bb8
SHA1 8f52ac9fb80e1f75fb4c20112d83e41f6b51b9a5
SHA512 ade1e430583b64f3a8ee77931b24cd4c179a44cf5c88ca46444f41616812d524660274f426d5ab7ec62e0277b58eb5e13f737abdfdca83db55853ead4ca78e5f
SSDEEP 768:jF+X5GwMbRR6v/H4EwYatl23bka4FtbP30qIlbXc/B/VDYFgHUAHFLO3+u1uNnE:jFROqkCEr2/Vd0WP9Ph0nVc
MD5 SHA1 SHA512 SSDEEP

Thomismens/uninfringible.txt

SHA256 4014208ed19d8a82a79ef53a86178d0b3aaf527a872bbc34d4d55476ba52c66a
MD5 f6e659de27c7920da8122dcd7c1ebbfd
SHA1 ff974b124b5c7f75694b9821fcf43a71e80ff8fd
SHA512 77b7c164e8a422b7db2b3ff9978689a2a67df34f84de2fbe25ef3517259908682de46c59264a4c3cddd5dbde16ee37232678097efee26fadba351332200ca010
MD5 SHA1 SHA512

Tudskraalende.Ild

SHA256 43fe2f78ec9116d38bbcbbbff3bf77c6fb78ee97d3a875c13e8314d815e4f04d
MD5 7e324cb2571c4b71d2d7f4b95f97e5eb
SHA1 7a9b0eda45524123305d173849b9e71ec82928f9
SHA512 37f1e5ff7f22264939197b28f907088cc63c8853675412eba901e13d11b261ef070f8fb9df4e2fd5b50053ede453f850750a2b2dce09d06ae2d772fa1cfc0493
SSDEEP 6144:emZh1GBXSLO4Y3KnpFpsIUJzoEnBv5IEsv4vx3ayWFsGjozm:VZh1GBXS4CpsLzoElK7tVsB6
MD5 SHA1 SHA512 SSDEEP

103024_37663.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 46622c1a6a63e6306f95c2b95265f6712c2e7a44feaa302e5cfbe802e27be7a5
MD5 4004659f4494c57e1747f5182d774eef
SHA1 84384ab6418d2034219d75b315aebf32acf4f5b0
SHA512 b5146ddd92719f46291d9fcfaae08e82726713be7f9ea12cb1c394424b40107727660c79411750cc43f43904587f4ac004b1365a1665604fb707f9ba5633ecd9
SSDEEP 12288:YWq1u4H7cGfjv0Uf93GwA8gTvRJNvCM+bM8WCvKGuxc2+PCMLXGU4y7:+3Dfjv0odgV6zM6Kp23LWby
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 f004c568d305cd95edbd704166fcd2849d395b595dff814bcc2012693527ac37
MD5 8b3830b9dbf87f84ddd3b26645fed3a0
SHA1 223bef1f19e644a610a0877d01eadc9e28299509
SHA512 d13cfd98db5ca8dc9c15723eee0e7454975078a776bce26247228be4603a0217e166058ebadc68090afe988862b7514cb8cb84de13b3de35737412a6f0a8ac03
SSDEEP 192:ex24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlESlS:h8QIl972eXqlWBFSt273YOlEz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Farvelg50/mutchkins.txt

SHA256 596538840c26693c58c0b29d4e87d5f7b8772afda83496eddb0338453fbcf3f4
MD5 9d94bdddc13fb5292a14ba9ad0fc094a
SHA1 0611eccfdf8621009d36086088ee17d723fe1d8a
SHA512 d780cff53a5a59e04cd609d3d0399f1ad1dc5bdedc323def6a54e3e6f0a2740e9a72a5c185186c02ef7ac32f4668e3c14ee2d8cedafb9984a8dcb0d32af0e9cb
MD5 SHA1 SHA512

Farvelg50/og-image.jpg

SHA256 9e8755e9c20f1c77db4c19aaf9c09c834645497a8da757a6012aa972577f32d6
MD5 a486edb9d999c22a10e57fc6fb43ecca
SHA1 927bbd3bd00352c47c3092d47203c969b5e8c885
SHA512 1ab3958aefcec27f321a3ff817133a9ca5b1e0e9e56adf46b3b74281aaeeafd9685d72174dd0983bb466de7ced38553d723de0d5816a0d86d6855e58bc4bb880
SSDEEP 1536:v8WqRyeHWYQmVwkQs312QdYx1/mMsrPxEFLcAjFXk3fANfNCEw4JRI0u:vHfcpQmVrhesrPKF/J0vANoEw480u
MD5 SHA1 SHA512 SSDEEP

Farvelg50/passifloraceae.fll

SHA256 a2a4516035a45feda01c48fc1c037d6a7f917c45f537e67b46332f305f97a242
MD5 66fbb90d20da82ad00aac1ae6644e068
SHA1 644c0e6f6b0e996865c36a4d2dfc4e2754ab35c8
SHA512 d6393da7f6062daf1edf70a522eb7e6e5f1e9b8477eb379c470cd16420b8a1a14941cf27365fa7e1f048f0711e668ece9ebaf12f8cd05e4e3e67dc1a8c1c5b6b
SSDEEP 768:Hsm578dsamuNZFw+GPLCZjpiVUOFG0vAMjpvXrnxnqmJzXxIdnIcSngAoE:us0N7bEjGshX1n1zBI2hoE
MD5 SHA1 SHA512 SSDEEP

Hlsset.sbe

SHA256 cba4c7bfed2cffa180f52550bede2a9d69fd38a5069bb8177e16010a574f0bcc
MD5 76a086df85546245dee2438a6904a8a4
SHA1 51eeae6ef48a67e15bd5ba0c4441812d47afde47
SHA512 2283df52987f69abfaf845568dee329f2afb4efabafcc581c81d942ff50561e1b7f57ec353c5e0ef043d58673a0115386fb21c8f5c6fc925e55e2c416bdb063d
SSDEEP 1536:i+RwwBJqUfBVB5K0I9OJT2TKnWM7NvR0Exhm7iAh5jDEEN3IRu:i+zj5VrK59yT2A7NZ0Ev6iAPDEnu
MD5 SHA1 SHA512 SSDEEP

Imperialine.Pat

SHA256 7ea8c9d5ec2d5a90a8e2671dee23eb1361819f44ad414a172713e401a65e8b58
MD5 70074b9864833dade4d89c951f67c4bf
SHA1 82b96b002154ddaeffb55513e78dc486dd921d67
SHA512 0586ffb3087f5071086940266057ed63c0be458268c5a2a306dab0684fc825a9a1ee747d615d63ba85c5e0b6f97b412805ccddf593f51f5c57a0a66983ca6423
SSDEEP 6144:NbUslIAcJjlF+ftGnR0h/3DwvFYqMB+115nRo:NosfcJjP+fUihEtYboL52
MD5 SHA1 SHA512 SSDEEP

Rudimentet/fonder.skr

SHA256 9cb43b4c08cc6226d6389197247cb9c7e94c7d05478a90a92feb7ea2b58e6014
MD5 43505b65f7aee37fc24adda62ccacef6
SHA1 f17d57382117bc33ad32f32de96de06028ee9f6a
SHA512 2e9ef41021aecb34000d25d54b18c7472032061408a21d7242f0f76fa06ddf92cb2f0c63d15eb3314ba47e472425040d1c3f4e4c7012f57f93bce41bffa00759
SSDEEP 768:Y6xuhcgjVv59a9WHrcrShD7kYe3693cZ8SrBIVEnum4n2s/R1T1HC0NUwiV+7/Pm:YFpZArmMy7j/p1JzNUhQDj5WXOKWrFs
MD5 SHA1 SHA512 SSDEEP

Stvlekngte.uru

SHA256 f72d4616971c45111c41881f1e4c4a02737fcfb43cbadc1063d3aa10e7c0ab1e
MD5 4ff0f06fd5cc4b44a73730b6b88b8325
SHA1 5a3fb26480f01afec911bf655e0cdba750fa35c6
SHA512 c79faee85fe416bc112e8506c6467fd2d73f1f565380bc25cb8e78cd56465d50cd4daf1e5065515baf91b2913fbcb6dea595cb53e67416bcb3796dda50fd2cac
SSDEEP 1536:f8u7IkXRKeZSxMOlkpYo1Q2ncZN00N5Y3pVE584ev:f73PZEco2ncZLY3k6pv
MD5 SHA1 SHA512 SSDEEP

240827 YONG SHUN - GMDSS.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 72c26861a3c6ed2f44684225894a20aef9d9c831322b5f24313e0c9ddfbf3ccb
MD5 f0e3355c1070c64e99331172426e4378
SHA1 ce7ed5a4e13477785be53c78f60ddc31876d50fc
SHA512 89e51b2db7d90dd25aa3dd0cc248e0b3b44d75305e0ba5829dfc9cbb9d74cce2ac91073de326fdd67992524632a9f1f7218187c5e255177d1c1f08e125339287
SSDEEP 12288:UfAbXkhMOoltiJX02vQp9XbzhNaSiVMTW9GvWbzfl/VP8MlGDDut6UrYm:pkh5oDiJNU9NwMTQ6U4JDut6UrYm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

738730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

PyDz.pdb

AWB #281024..scr

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 88bb9bed8031190a16d24e5e26de559fb3ba8f7cda489b8f09cb40e2e1f2df9a
MD5 dbea8d0867f7778d1a4ac7ee5c2ddcc9
SHA1 ac3744a6d1ad36ef9d57fbb6a2f40f1a45f63637
SHA512 d01230eaf87229e58627d763352b56e5cca8bc4e55fe852ada3df1e16bd6b1285e110e3c7507e5a50c37c391541bf1bcad257f0eebfb55231162edc8ef15a666
SSDEEP 12288:OAgyHUjQ+OXk4lpfL0ND1+EpT3T8DRngh7S54yTf+GYATqgm9MuJr6rq4YjyndWm:ZUj4uhIEpTQVMA2l9MucrZk6z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

984046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

EE85716273pdf.vbs

SHA256 f592c9039e109241cbfd30ae6b0ec2c1098b10ca1dfa80eb427edea6564265f5
MD5 dd2dbf4aaf7ccc943b82dda51afc985e
SHA1 61a75176fefa4be72f5978319116722396a0e919
SHA512 bcaaeeb59703067a86e59d94323f20347ca047c54658baf2dd4f50101a089b63407de4654138ed6dcf46a664cac0f5724322d9db86e4167d1e61b09db4a97f32
SSDEEP 384:9b7o6mutReVkQRfjj+3auNjYKv5QN+pBcXg:ds6muSfe3auhYKuMpB7
MD5 SHA1 SHA512 SSDEEP

Produccion.exe

IMPHASH d4b94e8ee3f620a89d114b9da4b31873
SHA256 fd424c3fcd01bce1f07c8040bcf1c3683078c4b048528f76efc69b26b207e1a6
MD5 df5e4c3fcbb003291a9799ac07c19718
SHA1 c73ba1d8e6e30a37cf4675d3204b15b75b330b26
SHA512 f6bbac1abf087bcb4730e8281d07af8aa70c86b5c476338df58cb042ff6629bcfc51e57a2ed4f18f444c53a2f2f914e170b1a2e73161701db9bbf26b7b3cc3f9
SSDEEP 12288:I5gGipxk+Kugo1xj+ZY9SQ7ax6q+gdD3/86DtrmT9cPfRNLiyi7TRd8:5Giw+Jn9SQ5q+Y/gcHv+yId8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW LoadLibraryW GetProcAddress GetModuleHandleA ExpandEnvironmentStringsW GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle GlobalFree lstrcmpW GlobalAlloc WaitForSingleObject GlobalUnlock GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW GetDC SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow LoadImageW SetWindowLongW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint SetTimer FindWindowExW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 e94a1f7bcd7e0d532b660d0af468eb3321536c3efdca265e61f9ec174b1aef27
MD5 ee260c45e97b62a5e42f17460d406068
SHA1 df35f6300a03c4d3d3bd69752574426296b78695
SHA512 a98f350d17c9057f33e5847462a87d59cbf2aaeda7f6299b0d49bb455e484ce4660c12d2eb8c4a0d21df523e729222bbd6c820bf25b081bc7478152515b414b3
SSDEEP 192:eF24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol9Sl:h8QIl975eXqlWBrz7YLOl9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Fejlbedmning.Cre

SHA256 4a5f19a2b32cf8131c86a3696d51a22a5fef2597bf368c026c7cddae9a0853bb
MD5 37ed3260041cfc8f558eadeb3110976b
SHA1 24b7fe84be4b099bfb2a114ae1106afecdb511a7
SHA512 e70bb73eb4516ea6bfff11d2c8b109425bb60ee930b00494e08d5441cae2cc6a3ce5f0730155cba1f4a7ddb87af5152cc0872ce3144e20321c1a69b07e872632
SSDEEP 6144:z93attiDXRyaaMkjdRYfT6HUMI1UcTfur:zsv8ArYfTORZc7ur
MD5 SHA1 SHA512 SSDEEP

Udkragning75.txt

SHA256 ba1c5a68f37f887614a24f049a02d41b39473c4b7f84a0db2bc1f3690235670c
MD5 275cd3c290015c208e1d7e73f9100c3e
SHA1 ab54852cb8c9db983a0cb664c42571877e3685a2
SHA512 df3d87871ea31370ce6674a08f19a1f186c0e9264c84388d954095c7b79c40c7e8d9a23683d25b667dd10f422b0d1de6a788da432db94bacfcbe9ce58bfe9ae4
MD5 SHA1 SHA512

bukkeskindets.hav

SHA256 d4663f81b11d3590d60e051448c6cb26bfb5f4789a6f9730edde35d78f32a689
MD5 a5ffed60cebde1ebca82e76fa7c8c6bd
SHA1 a819e54237e22c02769f183f59e4805d84af8987
SHA512 61e2e98f1a6488c79c8688b1eb43daa6a09c33f6dcc578e4bc79d481367cd2cf67814cbafc3f72258757f15cdf60fa1f8f4e034ed93efc1cddb44d6bd7f15a45
SSDEEP 1536:kuZ95Qjm57LIXGikXThD5gLrQhkrvCOEaKnqrvQy6h6Dsza+nAk:Lujm5/IXEXTiQqrvf92JhDPAk
MD5 SHA1 SHA512 SSDEEP

gtx.jpg

SHA256 c39ad9d27785be80646c5462f559455b07b5a013fcc0707e319395a7b8e021fe
MD5 2f5afd2d81a0e802450f7b5f9e541177
SHA1 503ebec0a321b292afea3e3607887cf1956e1dbd
SHA512 1de3185e99afd684b1434dc38c470940ee1a3940dcb78279c6b71ceecafc6d3f1f714094e699fce65d3175d91a065e8660487b495c937ab9a09fee3e6d1d73cd
SSDEEP 1536:ICtnsmW6u1pB8l4UtPXnRyJlxwKSHUrPMuh787TKAx2wzzcbnO3srBCeIN2hsIzB:dr9u1I3tvn0XxMOkuh787TKAx24d3CB3
MD5 SHA1 SHA512 SSDEEP

sensism.bas

SHA256 cb1178a4a21f8b12fb3544cafe4625b6c098752ba49bae561f247b3094c43fd5
MD5 97644562741015704946729715168bed
SHA1 83cec9fa1e2cbb4bea86ca4ba79ec135e39b7408
SHA512 87e304b1c1d8127d841e77b7ba40d8913202fa0b3b470848ffa155c2aac59bfea137cfd5ca8c87e181eaab82926c810aff624a757b1118c6d817b51b32d2acfa
SSDEEP 3072:sT+qlTYiP7oneFImU16PUqzd2RX7ZocgA:nMGaU16HMUk
MD5 SHA1 SHA512 SSDEEP

subskriptionen.gan

SHA256 2251156dc9349bbe87f490ec9ccda16fc3aba701e2c44ff0b60ad6468277b7c0
MD5 1cea1993a071fd7c9ce75713724170ee
SHA1 99611e72a6079e180f9c9e654a68727ea1f6b6fe
SHA512 ec31ded8847c071a93c946578e3f647825d77cc9d04ce33019eb51346e8036efa8d0c71e3273550f85193d2eccd16478fa5042f0238dc07f31405f475e40d59e
SSDEEP 1536:CM6JQ5kteG2RK7oZFOtYlSZfU+aDXt9HkIFCkjc:2v0+YlSZs9x9H3N
MD5 SHA1 SHA512 SSDEEP

Quotation.exe

IMPHASH 3f91aceea750f765ef2ba5d9988e6a00
SHA256 6d3bda97722c347d083d7127f23eae6f28e86ee31a8b9b643826a44bdc97be69
MD5 eaad92690f4cc140b25affb391767c48
SHA1 2f161c2e596eaca3f903f56fc24561c610ce0bcc
SHA512 b9755a349d09904ed4f1c702353e9f8c3e8b4063f25eb349695452bcce1f930b3473ce1a0c3f4b1749e8afbc643fc87e253188e33182c2ff0ee50ef23de67c80
SSDEEP 24576:z4nhDoAFq/DZt9+jNcwHCBNFSgaEMZNXLGQ7WczkxFnfbP9b:z+hkxlijusC5SxHNXKQKczgF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

79:bd:93:de:d1:34:a7:01:59:aa:7b:89:a3:49:2c:8b:14:c1:69:18:88:e9:69:34:53:1f:c3:e7:6d:5e:9a:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=hankelses,O=hankelses,L=Limoges,C=FR

Chains

Nov 5, 2024

PE Signature issue

Digest

07:06:da:ba:11:3f:5d:6b:63:07:fa:37:4d:04:ae:69:78:aa:df:ac

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=hankelses,O=hankelses,L=Limoges,C=FR

Chains

Nov 5, 2024

Minor OS version

1

Major OS version

5

Entry point

14042

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

ShellExecuteExW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderLocation

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW PeekMessageW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

WriteFile GetLastError WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess CreateProcessW GetTempPathW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetErrorMode

$PLUGINSDIR/System.dll

IMPHASH 4f33ea844b96a31c8f4690530ba63854
SHA256 f917aef484d1fbb4d723b2e2d3045cb6f5f664e61fbb3d5c577bd1c215de55d9
MD5 d6f54d2cefdf58836805796f55bfc846
SHA1 b980addc1a755b968dd5799179d3b4f1c2de9d2d
SHA512 ce67da936a93d46ef7e81abc8276787c82fd844c03630ba18afc3528c7e420c3228bfe82aeda083bb719f2d1314afae913362abd1e220cb364606519690d45db
SSDEEP 192:acA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:RR7SrtTv53tdtTgwF4SQbGPX36wJMw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$_41_/Emmens.udk

SHA256 1b6dc1ead079db05b998725b154e803e6e1504e7e5b49c5611d55e018cd45e6d
MD5 1d099f6122f4b7c8a78925726b59e5c3
SHA1 eea154e31ff04cd1a2ced0193f7633ed219cfa47
SHA512 f31f0a285c5a6eb2236ccd49a8bf939e46624f270e0270fc4c5640b37684bc1c7780c5350f778da8e9d0b8cd25320c1909a9cd937f15bb3a7cddbceee94c47fb
SSDEEP 1536:+yiLw81PnsncGiIsTVODPOqNbsVEVWZkZA4:G/Pne9iIyVODPsVpZkZA4
MD5 SHA1 SHA512 SSDEEP

$_41_/Flirtish.Dai

SHA256 d6b517f8a8c4b93f8bd0a3d9bf513459936ea8fd5521d83920c329d894eb14b4
MD5 5e0fbb8824a8bfec31c19926b691ef86
SHA1 0b77905858ff54631c6db2c417e5583236bab98c
SHA512 395afb4d33bc9ce20c062a271c3a4dbb0c44f3621bbcdf5caadf58edbd0d63a08925601804d14ba39b340771d5b558ae7d20ec9a4773ccd50ee7b043275531dd
SSDEEP 3072:VN1e86WYE6C9jyymU9LA5K3Et3RWYM5gg:VekfF94K3EtBWYkD
MD5 SHA1 SHA512 SSDEEP

$_41_/Otomaco.Eta

SHA256 c3b5cfe284b81b2e6c1028b3daa96c9171b060614ffbd5ccedf2c24e108de2df
MD5 0b8469a4a00396d93894f3ca7c8254e3
SHA1 209fb7b86c9911ace50dd144876354148f5915fb
SHA512 be3e87f72255f0ea7bc46b9235b78dd8ce75cff68e7f270ff320f53826d8e99dbd7ce6034d42f8085431abafac0a027e085f1d91dbd42925e7832b41f93c0836
SSDEEP 6144:GO1jOE2gJQAtsNGKmFCR0l3h0Y+Qm/XVKf/17R7C:L5Jb+F+13h05Qm/XqW
MD5 SHA1 SHA512 SSDEEP

$_41_/Proprietrer.bet

SHA256 645c325f62af720972466322b09a7e396e46d8e640b138d582374b68d763a3a7
MD5 0b62328c4966f6b879b3c13b7fbd9c0d
SHA1 6dd81f12e739e81e06778067513ed1178a06afc9
SHA512 2f738a2950352f124f7b969d38b52bd2e4453ff42bc8deb7566620e6cdea30368a6dc16230ba49050f8c0327175cab71dc4a1709541f08a3ffdcf55faf5b75b8
SSDEEP 768:l1SkOmjqFRV/HZzy6+19kZBH4YVHCdJS7G5iOUEEaXXLlgHHl7MRY9hN+418WPK5:KOqvBJzC5vBhp8KT9AGCbQTZkkR
MD5 SHA1 SHA512 SSDEEP

$_41_/Trikstanks.pra

SHA256 a55dac07fb586d4b64f0ddf812087a2eeec6f5286d9bc73ad648ed3220abdd3a
MD5 49be0e06f2e4f0ccffb46426ee262642
SHA1 ff9c56c31a824e4ca087705c23d01d288fe34239
SHA512 27e9d035708943dd257186457c15488c9405747fc77f7c76760c96ee011c239f9fa53b5da17958038fb2ba1c4e27e643e7924a37e6164e250b9f45a109d92e53
SSDEEP 768:AgVdAd1etxyZmQhZgJwrQTTwKuiTGrJqCoIEsPkZnFFSKsOI4v/3n35lB3LiADa4:5TxLsV5IjQ3xx12
MD5 SHA1 SHA512 SSDEEP

$_41_/boyaus.rom

SHA256 a56351ed69a301f5d9d89b6530280b7a85f998a806e1648911c37b6983ba9426
MD5 f130ec3095dbecedc791d8c58a59040c
SHA1 dad2300b487f31f199520e1b41ab02b7d677b352
SHA512 8599200f472f2d59390e8f2c497331640b12ab9faf71817160c6d450edf8a99f78cef28cc3b57581d6aecfc1ec90a49947a6685c606321b6ee300d483c838360
SSDEEP 768:jby0EUrStmwpKcx/orVcYZ+M3ok1I7vZFCDrlv2UV5t3votN6cGia46OGj3OkYSk:FaZaukRTadSdbrJ5N275Ea3nRYS3r
MD5 SHA1 SHA512 SSDEEP

$_41_/gear.dra

SHA256 fad1b5e641dc44b5a51048470d4e0fb47664cf2b994cea24304495d99323b9de
MD5 53ff1a157920ae92c9bf891d453d6b65
SHA1 b7bf3b7b16048f38132d8acca841130d73db44c3
SHA512 e739381c24627f89255db55b2da39a09f055a322c577c3604ba048fb2c817ae7f63b12131f8461491f6140953fb33dd94eb66d8cb3b13b36717143342ce270af
SSDEEP 768:NFXORpsqJLOaVDzzoIgUPRGRoYNxHVxyczaUz4pP9Nom56I4tY6UBh1Yc88LaAQo:TUAoYxPzqoIzdwWR1+/24cwZXeCPiIBo
MD5 SHA1 SHA512 SSDEEP

$_41_/jagtfalk.ill

SHA256 accd4911d88e808aed4a2aa27394628c62574810b0b47977b7103a246fdf2a10
MD5 169115c751dda5e021e8c86e8454b26d
SHA1 5a8254634c0c726bb18e42e626eaeb581d532dcd
SHA512 2b643014e8623cadba7ce78b91d3c751d60fcbf3fa69fa26f29a14e55679fc6a5c2074834b2496773a1756e3172ec7c898e2df29cb4a0513dbf8bc0dcdda7e04
SSDEEP 1536:XkYzjcLYszRzU5n1C900tMkYQx+gnpovYHO:XkYz4DzQB5sYYH
MD5 SHA1 SHA512 SSDEEP

$_41_/regill.ful

SHA256 4bc57a47b82b63ec20b393f65f3585eb81fe3f7748229cd19dec8fe8a41d67c3
MD5 b4fb425baf217f31e91aab39abf66dcd
SHA1 03de3bd0f923ab14213b6c4461c5ca73a0a6371c
SHA512 e72395fd6098130efd543c5941781a1aa80fce17c7701cb40fa8874271e0d43e0f7f082ebf5d458181287de41cf4b34f88dcaabe84d8ad51003ef5da1495d871
SSDEEP 1536:HMtjgMjMD1whyMu1IXCVAcFNpruXO+nBJH:stjgmYi03XDL+nBJ
MD5 SHA1 SHA512 SSDEEP

$_41_/sortlistningens.txt

SHA256 2ea079dede1b356842c5f5e0751b5e2b6565fded65dafb59a73d170c002abb27
MD5 46003c65aa12a0ebe55662f0141186dc
SHA1 739652c3375018daffb986302a7d3e8d32770b41
SHA512 59d394789f9eece97873d56aea64f353d3e13e007e4acbd396ac76cb68e91494eb65888049ef05cbe9b20597adadcc960d067f90aad3ea5aa46ac3a82f5b82fd
MD5 SHA1 SHA512

報價請求 - 樣本目錄.vbs

SHA256 52bc69a2c50c4bc07047508511fe4e7c17b3f380ac3a6a2f5229330b0b1a6980
MD5 3655ed4ac8786b349f6c824ef9fbf58c
SHA1 a2c6abe2e04a0c5548288ffdaf4a9c27bc644d0b
SHA512 1792ca76e88342a853ffd6f35cf53956d36178811b411361a5f15499570f02d225c53e83fc4d0b3c85ce1d4009466dc289c0fbeba1984da838110eb9e6519a48
SSDEEP 3072:xiHtveXendAy3yrLRKm+ay3tJuj8Sq2qb0M240PCOLvAtK3qfBHqnSBu46:xiHtveXendAy3yrslay3tJuj8Sq2qb0X
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer