PolysealsSdnBhdStatementReceipts1111[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

PolysealsSdnBhdStatementReceipts1111.exe

IMPHASH 61259b55b8912888e90f516ca08dc514
SHA256 18bfaa34bea9797ca82ffa02adc900f70ad24ad9663afacf0d963ff41d3a0c17
MD5 3b50d4e4dfbc3dd4616540a5f4a4c77b
SHA1 ecfa344492999e0b58524cd759bd1ea296c80d2f
SHA512 4ca6beb0446b074e05d44c9e172a2f31a2ef47ceac83c3d141524160d08e8027d4e6a5a6fdde6eddd31f227353e9e079e77068b2f74b38527d4ae7a30bf0141e
SSDEEP 12288:yYrwHze67C+Szoaz6PhVeYqqGrZqVY/h2guBONyc6SwLIrpwEVNNrygxj1Nj4sl/:yY8Hze6fuoOchVBqqGcVYsK6SaA75TN7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e4:44:85:51:88:8a:ed:56:48:73:89:66:ee:45:12:e2:40:16:e9:57:35:1c:16:e7:d2:82:61:c2:9e:17:79:64

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Eying,O=Eying,L=Nalliers,C=FR

Chains

Nov 11, 2024

PE Signature issue

Digest

47:1b:76:c9:98:63:2e:73:99:1f:71:29:95:65:eb:b5:01:68:fd:f3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Eying,O=Eying,L=Nalliers,C=FR

Chains

Nov 11, 2024

Minor OS version

0

Major OS version

4

Entry point

13888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Brnelrdommens.lun

SHA256 2705909ef5cb4d125b5e00439729805fc9562472cabf6cb1afb6ea04ca7173e7
MD5 cf0cd809f01018a3bbb4e70762b2e322
SHA1 ef4a614723d32e90dcbf86d6621aaddb0629bfdf
SHA512 2e8e0e2d48c43ef856a363de2a622e668a2533f6739ec5489095cc91e4083de3950a5533d4eddb10743e12d92498e8b6d5a71028e16592ffb38b01172c266cc7
SSDEEP 1536:bnugPaE7tki3z73C/MjItul8rfsKve0HdvZ:bn1Pz7tbfC/MjItXvz9v
MD5 SHA1 SHA512 SSDEEP

Finanstilsynsdirektrernes.Slo

SHA256 72bc12c063256d4c3ed35e609431160d319978ea326c2976c3e55a046202ff7a
MD5 bf0bea4868a351fc9c8a42dc74e8c282
SHA1 6ef89d3b9b2a00ce77f705f4fb875e35af64d894
SHA512 ddb203fb2da2e8e3e4a624638a3035dcb3460fe418677125ff1253493371e9adace32abcfebacfc8dca31b7578844d602c3ac174d0db25f182c1b9f5324721e8
SSDEEP 1536:u5sNjHiC4231SOcXODYEf+D/8Ez53OZEuxJnh7FXRao0JeuZrE/SAnq3BXpHvX7:z5HA+8nEEz533uj3cTAKICBXJf7
MD5 SHA1 SHA512 SSDEEP

Premonetary.dil

SHA256 ec7352a2bb6b651fd24926234406e0f255dc4f4b662a03f19538d9a8cc4a35dd
MD5 2f46793f9d4ba903af405adc449eca9c
SHA1 6de220fd6be0b24940981a1d27cac6fa2ea7f199
SHA512 bc41583b5663ae35299d0eb3c5553f9dcdf40615b151c08738958164d03d695c62a87b851aa98dd2df4fce33f369b17b97fbed65e6d74623f93361b304cf4a0e
SSDEEP 1536:RRtASMFY0BklyO+v58LGViSakVNA7FWjXE:RRaSMpELGVJFVNA7
MD5 SHA1 SHA512 SSDEEP

Srtogene16.Imi

SHA256 0eda72dbc5640f9e7ca25ff87b9ace086897a012da697a27ed85510f8c030762
MD5 3fb3f9d0f9acb89c759e10a2f2078754
SHA1 a0d755b9663e1bcc0d9e133ac9b13d621ca2806d
SHA512 5b3f4334bd79ce208d170c434d86cd81a0b45fc9a70bd619c86a65851f213f89b34a5c282d87851c919486d9ace6ae91f52f5e41e3c511672c66a2e06db0936a
SSDEEP 6144:LU/rZGzNVea6d1optn+yc3c9+heTIXGDl2PB9PqdpLLZs:LU/rZuVea6d14vcM9+heTnZcPqdpLLi
MD5 SHA1 SHA512 SSDEEP

Stortud.ste

SHA256 eedcacb7ca516f4fed6f62a57b9c1bb318fe45e4f57d5f6a1b9705e079b5d163
MD5 0257125e22de042b9cb1cc31ef93c862
SHA1 adcfb447fe977849725a23eccc2bdceebd958c2a
SHA512 5ddbdf4118cf36d0d19e63c6c94eb4834b9504d500b2e5745febec5b3a3e38c5fcb5a694ad2d1857fa600663ff5181a7cb664dce2417fd41ca7361b729a76669
SSDEEP 1536:STI1ZppHDKqvHYKuE0ZjYavC4Retvsrvz8lE+9:SMCKp0pYavC4ReFkwl9
MD5 SHA1 SHA512 SSDEEP

oligochete.skr

SHA256 ba00374abc107f875a238bfe2ea865d4e7f103ddd00f2beb78894de3cad2dd16
MD5 6dc100b8db4559bd68356ff2257f98b7
SHA1 7378bfbd49a83e13c3eac550e1bf49f38c19324d
SHA512 8451e468af387b04559f427f87d5d82ee6207f7757b03b9dd8b413866acea877d6db961597a760e84af0f9506e019fd1f61bd7de46c5a4869edd30fcdc8fb4ce
SSDEEP 768:Ql5x6HwKKJR8qdNyrNCGDNM7J4Qhzinxk7O+FqY1KuM9/ocCHEzIa+rFL9Nu+ZX+:bV5K+dY14xAy43VZXBcFV
MD5 SHA1 SHA512 SSDEEP

sovebyens.txt

SHA256 46bf279c8bd8c7ce6bfe3828f8df56a93551c80eb573d20480a7a48c2c32e650
MD5 ef1df29e7623288ef337ed54e033d1a8
SHA1 2afc855baaaca9224883e609a40efd4492a570d2
SHA512 49aed4f9b4ca9c3ab99a1db1f70e3be7a7b8fda1652841aba2341196c2c511a3ad41bbcf1da418472da75b84f4f1054b4fdbfd271975450076a557ee348553a4
MD5 SHA1 SHA512

tolerability.cab

SHA256 785ffec0ae9b2806d4649f1a3d61e16ef401dfeff0d8f6cfbef2760d3b1eb113
MD5 68edabacbfc437d78c35aeb4b18ad633
SHA1 dd4bfa672d2273d2c02af28bc11d261468fdde33
SHA512 36e026d032316bdfd3260c8a1bf519115996398ccdb2e6b45f9bccad2265f561c9ef01aceeaa17d5b1bda31920b1aaab170de9444d5e6f4e0f5c6acc863ee428
SSDEEP 768:p31s7SpqC1cHApUxphg4sAsJBhjEt3l805ncEDtVbwPLoJCUXmwtPdc82A0N6ixL:jPoWzIXBJDIgeUqjslfEsw
MD5 SHA1 SHA512 SSDEEP

PolysealsSdnBhdStatementReceipts1111.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Brnelrdommens.lun

Finanstilsynsdirektrernes.Slo

Premonetary.dil

Srtogene16.Imi

Stortud.ste

oligochete.skr

sovebyens.txt

tolerability.cab

Sharing

General

Malware Config

Signatures

File Explorer

PolysealsSdnBhdStatementReceipts1111.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Brnelrdommens.lun

Finanstilsynsdirektrernes.Slo

Premonetary.dil

Srtogene16.Imi

Stortud.ste

oligochete.skr

sovebyens.txt

tolerability.cab