scan_241205-801_draft_PO[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

scan_241205-801_draft_PO.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 b5486818c1913895b913ace02e94fee62a6468b3df96abd6c75c863499873dd2
MD5 16df1bbb45f31ef099862d1df04b9741
SHA1 e9c1056bc30a3817d84656a944b39190cbb1b7c9
SHA512 083ed41b277bfdaa0876c756868acb0286d22eb498aa4f18638a258a86559ddc6bce35d777b259f71b7d392291d5ee0ad346671931c562c89bafc4c555d877cb
SSDEEP 24576:tmwFwYo/knJ5vkeSTejf+WNvXgd93W0wbenPc15QClzZ:gkVosnJSeSTw+WNfgdlZ0iPc/Q+zZ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d8:b6:0e:71:b1:79:d8:ab:15:26:09:95:63:e0:8d:ad:34:ae:62:ea:63:19:68:d3:42:50:d7:09:41:28:66:85

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oprrsbudskabet,O=Oprrsbudskabet,L=Lion-sur-Mer,C=FR

Chains

Nov 29, 2024

PE Signature issue

Digest

bd:36:7a:f2:5a:fa:62:a9:f8:c5:9c:d6:cc:5a:9c:a9:17:7e:b1:49

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oprrsbudskabet,O=Oprrsbudskabet,L=Lion-sur-Mer,C=FR

Chains

Nov 29, 2024

Minor OS version

0

Major OS version

4

Entry point

13164

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
MD5 75ed96254fbf894e42058062b4b4f0d1
SHA1 996503f1383b49021eb3427bc28d13b5bbd11977
SHA512 58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
SSDEEP 192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10647

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Komlk.sis

SHA256 7e4d4f5c9178d96ff91bb8f4dc89872244ecf831e5ad0e5c6cf4bd411e89adce
MD5 bda9cbb5fc61d36a238fefd12958f62e
SHA1 7bc3313b428196113c197a30d8b7cb5bf8c05b8a
SHA512 95991d21435237853e11e63ee97b7e2084ad5ea901abe860dcac88a31514f6690dd749f3bb50632db3b8c628c20f17658cb41f48abe2dbf991c8cdc3626a11a6
SSDEEP 768:XMVokU9XU2TAW7nXu1q0bubAevzMe4jOsksbDX8CoRRG5RNsdnEoqd1/lOd+bcRg:ygh5n+Do/xEL1sIexdfrz4lUp+
MD5 SHA1 SHA512 SSDEEP

Mantid65.cel

SHA256 2871ba9e9a3fb012b925dbfc73ecc4ffcb9a6d9376f6fa2b5aeaf9f024d9b1e4
MD5 fb22146e36b38923d39a5ee2ab6eef04
SHA1 dab6f2672d10c6b155a723f5d840e3d327951eee
SHA512 b35b91ded0ac188128768c12136cc6255a9ae442099eae6cd8d713bcbb96c935b8e1befeae148355daa462c11fe545d6cf83ebf366cd74430bfd74eaef5249c8
SSDEEP 1536:5fr0wQMArQad8rDGuMYQ0/Qa9ArsL2H5I0Uz7v+ucz:+wFcvdgvp/1e+7Ch
MD5 SHA1 SHA512 SSDEEP

Montclair.Hys130

SHA256 f3a84d87d18c4f2732da06fafb9590df266d124a442182cdbd56f9b574cd621a
MD5 b36efa81fb5e6a02b6f2faa7bf990cbc
SHA1 0196cb2da99488d41d38f4269889277b08ca7865
SHA512 c756cf7d630028f247de5c5074262c92d8605a18119ce205bb219b8dbee0a2f3d4a1993be9d7e8d257fb4c513bdf70794d75440f07f7cb3cfdbb8cd9229139f1
SSDEEP 12288:uI6Oj36yPu0Ja6/33YbcW6da70JW/aEkb:nPuG3+hpO
MD5 SHA1 SHA512 SSDEEP

Rneblikkets.Nom

SHA256 ca852bc35d75571b052b941a0f9d1eb4cce8046c4a8ab3d59ef0960c4083ad73
MD5 6509cd2140680be1e1d0892275fd4d8b
SHA1 70b1ed731be112fda41c026b4303c49f6f43f07f
SHA512 4b7933c21046f406e7b821375bd6a26ccf52f9ac004dd4599af770a3dcaf766377d257965848faf3fca8d2229d12b2065fadbb0caa903eb44c3b719a828077c0
SSDEEP 1536:S2kbP8KclGU6M2ZnuZyBfB/RFXZxWEeSQ:7UFcR92Iw/RFJneSQ
MD5 SHA1 SHA512 SSDEEP

gabby.def

SHA256 fc9a98ebb7c3c9d2005fc0fd9a8e60c774dd9a20d2bacd3d344949ffddfe7638
MD5 e7ee3636b1b6a1f652676949a296617f
SHA1 5e43ab23abc459fefb83a051e94409a3241507ff
SHA512 3368da528533dae0bee4328d11c20939951078a6f27b51ede1c9f40bc892f2e3f15f3a83a2ec1a4828edfbaaff31b879bcc56a4d30e40633810988bf5dee01ae
SSDEEP 768:voIK2uqGXqR2QR5ETTH1Ug91Zl+LkfQoNl3WKrZBodLb3MB43uSXui899KBCAqeq:vq6I9FwLb8BVTAquN6zXOYxgc0d
MD5 SHA1 SHA512 SSDEEP

hell.fyr

SHA256 7d89a290512cdec472b95d4c59da82d661c9b24a288915027e1eed78b265af01
MD5 6b32d93e2ce9b47bdde5ce664361d055
SHA1 a20a4433745864c4b624d20b828264f9722012ac
SHA512 5f5f7ef64082e5aa63c181608ea93943a0a4e9838e9d1b704c9b5890c38b53d3578ea2024c63e6cd9c67bf60cebb9b1f9922cd70e313bef4a8033271e109530c
SSDEEP 768:6IHcBvc7rLF/RdudhUrAMYGOdSgiA6kWS+ADSrJ9XTqY4R5/3PXIxSZ8COsoUzCN:cUxKtUAe+fxwgkVLDWvimwdRD6XZ5xW
MD5 SHA1 SHA512 SSDEEP

shylocking.gri

SHA256 792b23f01e5cb5d6a4fc8ac4c611857dfa8abc378e00e2b5d10e11cb772188b8
MD5 b64deedf2f6937a239a3fabed92e30fe
SHA1 5cec838bea55aacbee4caf80d7884e96338ec513
SHA512 adf5980cafd3334edf5c8f0bd37a3c9b5228b45e5ce79c6aa394cae345311fbd72f68712949085c0450b34769cba1de347c6b66a5ec79b92a1d3f3c7cfff51c2
SSDEEP 1536:nRbAnerKsrBOzrm8wPjfSX97sNV7dCZwLX0KOAxu4Syyo:n6Bgy9wdCZoEc4yZ
MD5 SHA1 SHA512 SSDEEP

teknikumingenirs.ung

SHA256 894b2734e92612cd07bf8be0d2909ab0190221232b97b0d6a78ac5abb0b68e7b
MD5 ed7166da0f5ba4846261bf9747f2c344
SHA1 73a3e840a7fec0fc3f1f18b53cfcce7b99faffb5
SHA512 ca90555d400d92eb408d481f9bf580f4d6120b053e21fcd88017b0f69438571c9b8585227398ee3e1bbf87e1e47bf94eea5cc45de6f268899959a9419313db4c
SSDEEP 768:cPqkDi5uSCaNdzVWDl8Yv5+DZ+NXYaPdP4RnI1BZdZKbhdkpA3uXgLcUFLBU4xDZ:MDZGRI/p2zbbNHSHsk
MD5 SHA1 SHA512 SSDEEP