REQUESTFORQUOATIONANDPRICES0106-24_pdf[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

REQUESTFORQUOATIONANDPRICES0106-24_pdf.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 6e64f28c7d7dc9f4f9590d3230de7a22dc5b982999c20dd5275cd0022405e131
MD5 da770716c7b0b341d67ef18b167e0b2f
SHA1 0efb141bd12fcdeded78fb0eb30b48f1377cde8b
SHA512 342a178500baf69119eb5867cbb57dfb5da0fe8cb5ea8575a112c4836c0c250473e153c39ab32bd6d5c34a9b284179c352b2087436364618579036cde7020714
SSDEEP 24576:mp7xzos/n1G90iLTUhItX4GlA18wgrkUgoAL7ewgFZSv+:Uxzog1GuMUlGPA34S2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ae:1b:a9:9a:af:52:99:06:b3:a9:0a:b5:67:1e:0f:09:99:d4:0b:af:66:17:df:77:92:1e:71:ff:29:71:05:3e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adiaphanous,O=Adiaphanous,L=Saltwick,C=GB

Chains

Dec 4, 2024

PE Signature issue

Digest

34:2b:4a:fc:0a:d4:f7:82:75:0a:14:39:a8:80:e3:74:03:09:4b:98

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adiaphanous,O=Adiaphanous,L=Saltwick,C=GB

Chains

Nov 29, 2024

Minor OS version

0

Major OS version

4

Entry point

13386

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb
MD5 17ed1c86bd67e78ade4712be48a7d2bd
SHA1 1cc9fe86d6d6030b4dae45ecddce5907991c01a0
SHA512 0cbed521e7d6d1f85977b3f7d3ca7ac34e1b5495b69fd8c7bfa1a846baf53b0ecd06fe1ad02a3599082ffacaf8c71a3bb4e32dec05f8e24859d736b828092cd5
SSDEEP 192:eY24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol+Sl:E8QIl975eXqlWBrz7YLOl+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Kriterierne238.unr

SHA256 5c41eded3c9cae8c3ea7263db382bdbb99a4f53948a1a7955923199404c31b20
MD5 6ab685436051b507d0dc4694f877ad8f
SHA1 d9b8ac63dc2a741fcc8bdcd3e7018dee7196b7ce
SHA512 edc4625854603ff0c4f2a0af6c0da8e3ba5363f23383d8ae67fc948eb9fe668841d51923675b2b24244ed22c6bc2568944c2e2be121a33049bbc22751b1e8aab
SSDEEP 768:zjfeQ8GNjEzlFtHByf/xRxoqdSknoxIoaZjfhu6iZbVIziVRBFLgn28mbenqkWHM:HXoCv1nlo33FgnTfSCy+BoB/q/Fj2oK
MD5 SHA1 SHA512 SSDEEP

Masonry.Lib

SHA256 2483a2612655db86becfaf2198cfb63f8e4a32b98bfdfa919daeeedb97cf0e5a
MD5 091f1e0e46fcd838c408db6ed90b4035
SHA1 e387f9bb895031b39f71ab983de228bda2f13bef
SHA512 c423bafa6dcbb2248c8cb828c98d2d60c6b828d638a28238b37fc1b9a5e4b00cca789a83c443425ccf5b5239b4f96b41b870e6543b943be4a11524de11cf017b
SSDEEP 768:KTpszvChEZQmDJfJwyeTXZbL1f7d5VSngzEW06m8:gpGQEZQmtQX11Dd5VcK
MD5 SHA1 SHA512 SSDEEP

Phonolite126.fig

SHA256 17c4dcc53b1bbd37068c1ac06ea37a8a0f81ffc80e88442c3a917613453dd177
MD5 c2d0fc01685524d38dec32a53c2fd477
SHA1 80fa7f1a32138862f148b740ae4041f44b6cd69a
SHA512 94cd58087e313c2cf140b8b6114e3625d7737392605a94fbcc6f16e1cca0624997287960a2115cbd03a28f06192dc787f0caa3aaed1a19caa4974988d6a46472
SSDEEP 768:uf8QqnXZW7jFCC6UdIkGJYWRsQJ1ftGkYV2hBhnPj8KBQvlFb10uHXhLSyWsfazd:x2JfRWh4RjCSRrkcyD85D4JaNe3D
MD5 SHA1 SHA512 SSDEEP

Predepreciation1.exo

SHA256 0324a8cbe0e73507113c7ad7b818103ebc89212b0d608b1d171453b336dc656b
MD5 2a47299f6d12b0ecd8ac2a9591a35925
SHA1 ac141eb097229868081816a960c1a27fda24c70c
SHA512 5381f8fc9fd8fdc12d629c96085f9346b1c4a1901c0379065f07bf2248f978ab7390a64d2045c19213d00fcc1f92b52d6244a73fd45bb587a3659b90f2b46d1b
SSDEEP 768:NhgOPZIu7xbnsmSOBCG2Dg3e/FKV6L/4EP65VseOLc8fROR9z/8hUPF0OT5FX3xc:VqhJB2Q8OCxnjmb6uy+Och
MD5 SHA1 SHA512 SSDEEP

Velformedes.Wag

SHA256 3849ecec43f24e1337bebac6a1fd91ee47c7a195c5d5574849891921d856381a
MD5 1363dab3f33f1fc9860bf8a6a7fe5306
SHA1 55ada677785343ae6e98ca077916e04bb29a0573
SHA512 4fabb430b52839b41d83c37713911997f829bcba13b15008792942a815c3dee77907bc667a2f4a3f68a2d2497b7fc6364a92fa1447ab19ddea33218ea364029e
SSDEEP 6144:22rPRWJEohkijBxuwVVFBcdaGbft54YQBgJt1rWoKh4YFlBSEn8GEvwI:gISuEVFG4Ift/QqTpWNOYFlBSq8b
MD5 SHA1 SHA512 SSDEEP

danjal.soc

SHA256 dadd7ae9fb6a5f59d9ff6e83bfc8b3b05b349809d5fa3ca53be2ece209822528
MD5 598ada234784b586ee991f7a631d7f88
SHA1 af8a1ca2ced128610704a9d88185a27f291e6058
SHA512 8d2363ecf1bfd87d977041e225fe728fa7c744b93826d9ea191d630451861b5318dc88f687c99c8bf77296c4a84a632e1b26b006ded2cc1bf21f1bb77bacfbf4
SSDEEP 1536:1wmrSu1ZUMpH9dzIhy/QZ+JmX7EECatke4jG:qluPXUh2N
MD5 SHA1 SHA512 SSDEEP

nodes.lev

SHA256 3f5932aa6ede08a494cfd1f9a451ecd69a158a031ec7297a04c84c9dcae5ae64
MD5 dce6b56b97dca4de052c8cf8f56b1ef4
SHA1 06a2f474dfbdd31370fb5268710238ccb9d95401
SHA512 b8b509b49ffc7d33405f41c330fc95f9035753bc0e368e9eaf823457370bf2039b2cb495af14af1ebf2ae8766de69fb32f23c722c460d74d380eba6678b1fa8f
SSDEEP 768:crChplQw7CJArTuVVBm9leE6cze5e06ezEN5Gfoe7MXXrVG1k2JRLFdH0KsO41du:xe5etx+oJXhLXRy007qO6sNngmOy
MD5 SHA1 SHA512 SSDEEP

terningkasts.tre

SHA256 7d36f4ec1952e28e04263035c25bca9f7e13877ee534d183925686492dc2e585
MD5 f3cbfab535eae73f0015c3b6d067a077
SHA1 d64e447d7515c4381d73b4c9276e8a9827343b6e
SHA512 8b6f6ade9330910b441b6441b8bb964efb938966a12d46a4b1c731f3132aeee7d53d69a57ead112f9c09e6a467424d284bf95e4618d10ca3ac51f6bd2f5126f4
SSDEEP 768:63SK0UT/ibMbyd9d+4Xp8UaUUPC+H24FHh9Er67P/5aN11D/12DFDeY8ZBgcaxV1:o1RPCEhP/iDYmf0zmxV6X5vXLuyS
MD5 SHA1 SHA512 SSDEEP

REQUESTFORQUOATIONANDPRICES0106-24_pdf.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Kriterierne238.unr

Masonry.Lib

Phonolite126.fig

Predepreciation1.exo

Velformedes.Wag

danjal.soc

nodes.lev

terningkasts.tre

Sharing

General

Malware Config

Signatures

File Explorer

REQUESTFORQUOATIONANDPRICES0106-24_pdf.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Kriterierne238.unr

Masonry.Lib

Phonolite126.fig

Predepreciation1.exo

Velformedes.Wag

danjal.soc

nodes.lev

terningkasts.tre