Image_Product_Inquiry_Request_Villoslada.img
- SHA256 14783a055ffaf5ff5e003128975ba33ec37264319a4e282b45c2bde946444a6e
Static task
static1
Behavioral task
behavioral1
Sample
Image_Product_Inquiry_Request_Villoslada.exe
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Image_Product_Inquiry_Request_Villoslada.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
17 signatures
150 seconds
Behavioral task
behavioral3
Sample
Militrattacheens/boliganvisning.app
Resource
macos-20241101-en
macos-10.15-amd64
1 signatures
150 seconds
General
- Target Image_Product_Inquiry_Request_Villoslada.img
- Size 762KB
- Sample241108-ssaymsxkcl
- SHA256 14783a055ffaf5ff5e003128975ba33ec37264319a4e282b45c2bde946444a6e
- MD5 2c5af96c200eaf29a49747616e873516
- SHA1 c680278cfdb8908632a5506259fb6a2dc826b5a8
- SHA512 f26b29bd8b62f02adaa717d09db664b2697ecfeaef1f884bddd50c956e72467687eb1a9197e42cd8ec926052e3cc84e8d65c41109e973e811abcff8f62a2ac78
- SSDEEP 12288:sMwd9MAsZuwxTSesxl98vQJXQNqlSFQkuizwFFRNkpXmGzEk/in5IAvmtnRHPG62:sMwd9MAgSBP84JeqlSFQdimvkm2t/6kY
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
Image_Product_Inquiry_Request_Villoslada.img.iso 762KB
-
out.iso.iso 762KB
-
Image_Product_Inquiry_Request_Villoslada.exe.exe 701KB
-
Checkbits.Lre307KB
-
Computergrej.Alu70KB
-
Militrattacheens/betuttelsens.fly262KB
-
Militrattacheens/boliganvisning.app424KB
-
Militrattacheens/printery.und287KB
-
Militrattacheens/unsealing.txt409B
-
Taalmodighedsprvens175.exo379KB
-
Tilbjeliges32.cha209KB
-
Whistlelike.blu289KB
out.iso
- SHA256 14783a055ffaf5ff5e003128975ba33ec37264319a4e282b45c2bde946444a6e
- MD5 2c5af96c200eaf29a49747616e873516
- SHA1 c680278cfdb8908632a5506259fb6a2dc826b5a8
- SHA512 f26b29bd8b62f02adaa717d09db664b2697ecfeaef1f884bddd50c956e72467687eb1a9197e42cd8ec926052e3cc84e8d65c41109e973e811abcff8f62a2ac78
- SSDEEP 12288:sMwd9MAsZuwxTSesxl98vQJXQNqlSFQkuizwFFRNkpXmGzEk/in5IAvmtnRHPG62:sMwd9MAgSBP84JeqlSFQdimvkm2t/6kY
- MD5 SHA1 SHA512 SSDEEP
Image_Product_Inquiry_Request_Villoslada.exe
- IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
- SHA256 3e6b2955e8e0ddd77f3886b9727ea7a38657d4f0af47130559a8cefe1c87ea97
- MD5 74436e65e2a2612fb6a127990d81f44d
- SHA1 d3fb7c67c6441d908a91d6e6b86e38c85b47b877
- SHA512 bbd6102c6759d61cb701cf235e2bfea442cfd702ad9def2e4d5134259678ecc0f79488e66d9e7bdfa39ae621f25ed5c68ccc21a298ddb5df497bd72070c0d491
- SSDEEP 12288:4Mwd9MAsZuwxTSesxl98vQJXQNqlSFQkuizwFFRNkpXmGzEk/in5IAvmtnRHPG62:4Mwd9MAgSBP84JeqlSFQdimvkm2t/6kY
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1a:39:23:23:26:d2:23:e4:53:d7:ba:66:58:00:e1:f2:57:7e:99:73:ee:e4:4f:b6:d8:80:20:5a:6c:70:65:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Spaerrer,O=Spaerrer,L=Valzergues,C=FR
Chains
Nov 5, 2024
Subject
CN=Spaerrer,O=Spaerrer,L=Valzergues,C=FR
Serial Number
45:b0:fe:c8:2f:46:82:3d:df:45:25:fa:bb:3d:19:f4:d1:b0:c0:16
Issuer
CN=Spaerrer,O=Spaerrer,L=Valzergues,C=FR
Timespan
Jun 3, 2024 - Jun 3, 2027
Minor OS version
0
Major OS version
4
Entry point
13455
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW
shell32
SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree
comctl32
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
user32
GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
SetWindowPos
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu
gdi32
SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject
kernel32
GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
CreateFileW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersion
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
ExitProcess
CopyFileW
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Checkbits.Lre
- SHA256 20f987ec63d89dd5df18fbe804334b7d7c55b6bf81208ded034af6fb48c6f31a
- MD5 8f6bc6f261f8da4b9a6c7b31f43607ea
- SHA1 9779d645414ba4c7c48d0ccc2d9ded28c7d5eb1d
- SHA512 4efcda9c1996a8f483da8263a9272e2696daf16043ad6aa8ad76e97bb53aafa447378a145445ef5f6c29548494533f9704e7c2ba2c83d2760757dd85ce24cc53
- SSDEEP 6144:IYH3v3wtpvxmRfl/Uc3jQERpc+OYdLnEpHAyg426vBq4zyJjp9Af5g8v2nMXHunA:R3cERpQgeAb42YyJjDAf68v2M3unIBp
- MD5 SHA1 SHA512 SSDEEP
Computergrej.Alu
- SHA256 02ecc22dca838ab93a43d7374bf8db4ff608c6b2d8bb4302011d9786e09f5fe9
- MD5 e6d82e81a43a91417e599dc48aa12352
- SHA1 0fa7ed8f889897ce3e2cef519196c420f1071d0a
- SHA512 a2eab0e9746425a4ce2a100ff688d34e059de229144d269a4b424b770921d4d77559855b32f4b4182bd41db2db49b0084036104631be4f7b76f6f5571b6d3c77
- SSDEEP 1536:tfHtG0CM/Nftwi1EVV/XN+oWtxZEFSIEH+liFZmxzXZ4tDqK+4y:tfH8A+W85d+oWtkFSIEDVtby
- MD5 SHA1 SHA512 SSDEEP
Militrattacheens/betuttelsens.fly
- SHA256 7d466b668e471df48e3852a906b0625e4ae024eb2728795ef3da898815eb5a5f
- MD5 9f165d4b6073826d03b00bbbdf7ba163
- SHA1 26251e57f7bd0e1cd0f03249ade3657521b2b089
- SHA512 064a5045bbb737a5c5ac5994e6d8acd0d24dca76655c944192aab2136195c11d6c22284bb24db3a4a3e82543738e503d21f9d609d7d42a6de0f4a7b90a48e5e5
- SSDEEP 768:qLgWfnr8+2FUsZm0B9SekbxU0O4+vzFghmLhmuSGDEt29AgJe8Gwy3qbsh2f/gzd:fWD87eUTkRORhDAMHx5/Q
- MD5 SHA1 SHA512 SSDEEP
Militrattacheens/boliganvisning.app
- SHA256 f45da7c81581e6c3f3211fb431a8259d2c05fa60635f4e1c764584467b71ebb4
- MD5 a254d81b4f25bc2b7d74ed5ac8ef3877
- SHA1 2098fcd61a958c772e7eedd5bb736deac2f0bd39
- SHA512 5cb1f8672197da9cf3b4461cc470bdb0e3e4965eb6d3c7170168a4af3d00ec23a1474281766f790fcc6fc577fccf89971a5addec5c1f220f618c6887ec6607e3
- SSDEEP 1536:Y2dHtzRzGpErAfmh6tyfeCOfrCmf3XRWxYgT0Gcu:Y2tpGpEMfhwGj9xWmu
- MD5 SHA1 SHA512 SSDEEP
Militrattacheens/printery.und
- SHA256 3e5bbe9ef855b842477182e91303711e7af14357b53ec3a44108451ad385a8ed
- MD5 58b7ae07c38a1066937238a856bd92d8
- SHA1 f6c9d70fc390b12fbc33290a9749011063cecc8e
- SHA512 24aabd6252f82a3b79f0bcf9bdbea4d0fd69e73168ceb67bc8d41877f7688b2c687a9f581fb61674762217a733e9a90ef825e292d86886a58b46df03140590af
- SSDEEP 768:txFBGigst6Ktufdhc2AfcZYoiUn4Ifok+J3hvb/1qLwXG4CYK/syWevlwGCo5Anv:+rEQCRq7nSo9RXfFIO
- MD5 SHA1 SHA512 SSDEEP
Militrattacheens/unsealing.txt
- SHA256 b5f2eabd150bb98325687e2153c491dc306318f11ff7357a13fde4db26228de2
- MD5 625b36babbed7a576ad4c4b70467a73d
- SHA1 30ca24945718e16042ba7241cbc5dd48d6df025c
- SHA512 d0ffbe09be20cefabe9642c6bd6b1f5ca7a67dd91f7544c611aa4b6bff994066538c61cb3af78592a89f914dfb1766a6cd776bcf3142f5e0f8fddb9b61e94a3f
- MD5 SHA1 SHA512
Taalmodighedsprvens175.exo
- SHA256 9932880882aa32509b59671ec75309928f7528887991f0da0689c66432ea912d
- MD5 3f73b6c7d42870e8cdda56d4fd394d77
- SHA1 637e3682b4dc586e6cf385c13972c73efb599d27
- SHA512 32471d03bc156050638498af682aedb513d93b287d0a1a01ee98a84f9aea15af33f51d3c0c167acd15622cf109dbff45fbe8d85a829a470f88c77d37ba246ff3
- SSDEEP 768:u7ciff9lOGuK5SWKMT0YlK5f+3aPzLDajh5TFnaqW2tiRFBnlCobowHLG2GYDQ2Q:GPKvz2BEEwr3xGh/fTesv4erCH+dh
- MD5 SHA1 SHA512 SSDEEP
Tilbjeliges32.cha
- SHA256 42498bc78985a5541757b01392db112498b2366acc62b19f6a9ff98d38a08c20
- MD5 4076a043e9fe3329296286a1b8611cd5
- SHA1 5e1cce1f26e7d2bd6bb20b3c85271306d8da6451
- SHA512 59390ad6213d92fa4c819862e62efcb8db6512be84db92d3df1ae7352b6d3201495387e62c67c6d7a77e7c14024120862660491d423bda30f1173276a7fb35e0
- SSDEEP 768:+vfwfNRNOp2ZrQAVSeRobZAwMaEqME3M4urNq2PYvyaM+7IJR056z+u4RQAj9CjO:iMNnGeIPWxtH8oRcUc1K
- MD5 SHA1 SHA512 SSDEEP
Whistlelike.blu
- SHA256 7568f3bb04c33265a9ac50e8fa4059081baf8d276380d8d94f084cbac66a52f5
- MD5 b7f28fff6adcdb992ff7c480241c20ab
- SHA1 2f6856eb5e69b9532243848266ae3cb08883d375
- SHA512 db394d6d892f6b911c8e4d3fbd343827ad7ca4357a10a6b50035961685cf39d15d0892b42ba044948dded871cba2a123fcd15aec220abb9a1cac16150fc1ffef
- SSDEEP 768:Sw3vYgNea/DQgTdF+OL3qHuqcZpzWjkdyLjb/idE4M43CU28uw4ETtWJJYWLJRzZ:jQghXEcn/M4Sp4TtAPSxvP2r
- MD5 SHA1 SHA512 SSDEEP