REQUEST FOR QUOATION AND PRICES 01306-24_pdf[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

REQUEST FOR QUOATION AND PRICES 01306-24_pdf.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 ed11370881ad079a86feb9c031523e138250d5bad2d213f44965b011e2a8b17e
MD5 c9be41835670dc7812af02619f861485
SHA1 f8e6324e38e340edde3f1845657e7e44d2c32693
SHA512 9d049ec2cb20a9a07f6eebaa3959932354ebe0484fdccd3f526d170177ba5c3b12aa9a5f1668603c93e469ffa025993cdc3319bd9209ff56f37e47b504b7dccd
SSDEEP 24576:sp7xzos/n1G9vXf8Je8iMt0azVysw6dCjZ9Fo:uxzog1G5XU3pt5E6kjZ9Fo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

96:ad:ad:ff:0b:6c:1c:e1:9b:24:2c:ef:f4:a1:e7:0d:62:3b:68:79:fc:9c:31:0e:3a:5e:db:a9:cf:70:df:54

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Proofer,O=Proofer,L=Ranger,C=US

Chains

Dec 5, 2024

PE Signature issue

Digest

ea:54:14:a9:06:54:0d:f3:94:45:e9:a9:86:0b:8d:55:1c:9d:03:34

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Proofer,O=Proofer,L=Ranger,C=US

Chains

Dec 5, 2024

Minor OS version

0

Major OS version

4

Entry point

13386

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb
MD5 17ed1c86bd67e78ade4712be48a7d2bd
SHA1 1cc9fe86d6d6030b4dae45ecddce5907991c01a0
SHA512 0cbed521e7d6d1f85977b3f7d3ca7ac34e1b5495b69fd8c7bfa1a846baf53b0ecd06fe1ad02a3599082ffacaf8c71a3bb4e32dec05f8e24859d736b828092cd5
SSDEEP 192:eY24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol+Sl:E8QIl975eXqlWBrz7YLOl+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Aandeliggres.Dok

SHA256 cb91d0a4bb40d30aaf343f4e44a51de2d5690f5986e7a8f4716d45fcb3eba478
MD5 587fce773a53c0afe55b18da06542088
SHA1 1fabd521ee221d0625ce47d03320f7cdbf474007
SHA512 398695ded95b38690959bdbb82ac89660d2c8ea435877c4ee32ab0b9178594f7f7f89e378763a9bbbed1b1b1192ee840f82108f53a10485fe8061076355f5fa8
SSDEEP 6144:2so3AkKFf0sn3IN6RASTtPOudPfxGB1uIzpaR4iw1t4R4q:EQkI0sYNTSZPO+S4Zct4R4q
MD5 SHA1 SHA512 SSDEEP

bothridiums/Breddekredsen.Lss

SHA256 cca750e3489db94f95e547976a5efa0a0317a90326a859115f67c046ad81023d
MD5 c04253f88c783ec1edf19e07f7a2785a
SHA1 9331a21d04dcbd93b05da8c6ecc3a341ee59d6a3
SHA512 69d4a0cf6eaa52f83063211f7066fd987ce76ccd62457bc401d4fdb35bb8241c3befc3ae8180d7db63d989cda418d1a222627588e1f257470ef7130021bfc282
SSDEEP 3072:cZjiBgtyndQvJwa2aZydGXb+FpQMrDPK/aSu5H:pBgtydu0YP4brDKn6
MD5 SHA1 SHA512 SSDEEP

bothridiums/Kriterierne238.unr

SHA256 5c41eded3c9cae8c3ea7263db382bdbb99a4f53948a1a7955923199404c31b20
MD5 6ab685436051b507d0dc4694f877ad8f
SHA1 d9b8ac63dc2a741fcc8bdcd3e7018dee7196b7ce
SHA512 edc4625854603ff0c4f2a0af6c0da8e3ba5363f23383d8ae67fc948eb9fe668841d51923675b2b24244ed22c6bc2568944c2e2be121a33049bbc22751b1e8aab
SSDEEP 768:zjfeQ8GNjEzlFtHByf/xRxoqdSknoxIoaZjfhu6iZbVIziVRBFLgn28mbenqkWHM:HXoCv1nlo33FgnTfSCy+BoB/q/Fj2oK
MD5 SHA1 SHA512 SSDEEP

bothridiums/Phonolite126.fig

SHA256 17c4dcc53b1bbd37068c1ac06ea37a8a0f81ffc80e88442c3a917613453dd177
MD5 c2d0fc01685524d38dec32a53c2fd477
SHA1 80fa7f1a32138862f148b740ae4041f44b6cd69a
SHA512 94cd58087e313c2cf140b8b6114e3625d7737392605a94fbcc6f16e1cca0624997287960a2115cbd03a28f06192dc787f0caa3aaed1a19caa4974988d6a46472
SSDEEP 768:uf8QqnXZW7jFCC6UdIkGJYWRsQJ1ftGkYV2hBhnPj8KBQvlFb10uHXhLSyWsfazd:x2JfRWh4RjCSRrkcyD85D4JaNe3D
MD5 SHA1 SHA512 SSDEEP

bothridiums/Predepreciation1.exo

SHA256 0324a8cbe0e73507113c7ad7b818103ebc89212b0d608b1d171453b336dc656b
MD5 2a47299f6d12b0ecd8ac2a9591a35925
SHA1 ac141eb097229868081816a960c1a27fda24c70c
SHA512 5381f8fc9fd8fdc12d629c96085f9346b1c4a1901c0379065f07bf2248f978ab7390a64d2045c19213d00fcc1f92b52d6244a73fd45bb587a3659b90f2b46d1b
SSDEEP 768:NhgOPZIu7xbnsmSOBCG2Dg3e/FKV6L/4EP65VseOLc8fROR9z/8hUPF0OT5FX3xc:VqhJB2Q8OCxnjmb6uy+Och
MD5 SHA1 SHA512 SSDEEP

bothridiums/danjal.soc

SHA256 dadd7ae9fb6a5f59d9ff6e83bfc8b3b05b349809d5fa3ca53be2ece209822528
MD5 598ada234784b586ee991f7a631d7f88
SHA1 af8a1ca2ced128610704a9d88185a27f291e6058
SHA512 8d2363ecf1bfd87d977041e225fe728fa7c744b93826d9ea191d630451861b5318dc88f687c99c8bf77296c4a84a632e1b26b006ded2cc1bf21f1bb77bacfbf4
SSDEEP 1536:1wmrSu1ZUMpH9dzIhy/QZ+JmX7EECatke4jG:qluPXUh2N
MD5 SHA1 SHA512 SSDEEP

bothridiums/nodes.lev

SHA256 3f5932aa6ede08a494cfd1f9a451ecd69a158a031ec7297a04c84c9dcae5ae64
MD5 dce6b56b97dca4de052c8cf8f56b1ef4
SHA1 06a2f474dfbdd31370fb5268710238ccb9d95401
SHA512 b8b509b49ffc7d33405f41c330fc95f9035753bc0e368e9eaf823457370bf2039b2cb495af14af1ebf2ae8766de69fb32f23c722c460d74d380eba6678b1fa8f
SSDEEP 768:crChplQw7CJArTuVVBm9leE6cze5e06ezEN5Gfoe7MXXrVG1k2JRLFdH0KsO41du:xe5etx+oJXhLXRy007qO6sNngmOy
MD5 SHA1 SHA512 SSDEEP

bothridiums/terningkasts.tre

SHA256 7d36f4ec1952e28e04263035c25bca9f7e13877ee534d183925686492dc2e585
MD5 f3cbfab535eae73f0015c3b6d067a077
SHA1 d64e447d7515c4381d73b4c9276e8a9827343b6e
SHA512 8b6f6ade9330910b441b6441b8bb964efb938966a12d46a4b1c731f3132aeee7d53d69a57ead112f9c09e6a467424d284bf95e4618d10ca3ac51f6bd2f5126f4
SSDEEP 768:63SK0UT/ibMbyd9d+4Xp8UaUUPC+H24FHh9Er67P/5aN11D/12DFDeY8ZBgcaxV1:o1RPCEhP/iDYmf0zmxV6X5vXLuyS
MD5 SHA1 SHA512 SSDEEP

REQUEST FOR QUOATION AND PRICES 01306-24_pdf.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Aandeliggres.Dok

bothridiums/Breddekredsen.Lss

bothridiums/Kriterierne238.unr

bothridiums/Phonolite126.fig

bothridiums/Predepreciation1.exo

bothridiums/danjal.soc

bothridiums/nodes.lev

bothridiums/terningkasts.tre

Sharing

General

Malware Config

Signatures

File Explorer

REQUEST FOR QUOATION AND PRICES 01306-24_pdf.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Aandeliggres.Dok

bothridiums/Breddekredsen.Lss

bothridiums/Kriterierne238.unr

bothridiums/Phonolite126.fig

bothridiums/Predepreciation1.exo

bothridiums/danjal.soc

bothridiums/nodes.lev

bothridiums/terningkasts.tre