comprobante de pago[.]exe

resource
comprobante de pago.exe

comprobante de pago.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 20dc4ffc31f978e2c822878b11a4d59c3ad6da9898a7028d75d3c9079598de18
MD5 969da5cc61a21e2d5fd00a52254ecd8e
SHA1 3f3cb9fdf47343f8e4d88e5171ad3b57ed6c4bad
SHA512 6df74d8e45b5db927d8962e453f379b18ba79dce91a8e0677b55a36c1a57f38c43f677091d280d1abcbcad2b214299aeb02f2784047411e2d62a6e0912556e60
SSDEEP 12288:1gP0I82X5K+GDnvy1eSLR0lUEkyZtyj6ittqTH3oEuprboHlExvyBBApy2HIxod3:EFJsDnylcpZk64oYEGc+yTARioCLC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Bddelkses/Haandevendinger.ini

SHA256 173a5ec7d69d66541b95edc9cfb99b7ff3af054e23a1a1e022e790e5b7d7cb4e
MD5 61313d818062fbfd3e759f3dab393769
SHA1 369870a1b8818bb8f4c4af5d8fcc9c9133bb2131
SHA512 f068828483d7f03af89bea92715e4aa1b791685f3d6f8e132b97a1cdd8d9dd1257a9f2cfc184f956bb29a4fe697b099b192e07407a6dfee38afc351b455a50a2
MD5 SHA1 SHA512

Bddelkses/Halfman.ini

SHA256 7ebb8d2b48eb1c49abe85474dcd24baa510ab73f8d3aebafd6a1e3479b58f03f
MD5 f6ad6fd2e2fc5ac7356ae652d8959daf
SHA1 8c23b2232a7335bb7c3efafe061f4154b4d6da22
SHA512 3279622b160c28c6525a390065dcf03cb9119280179a7c761af7a729e5e95741f883b51c489857573ceb3dd7a81ac90dac6417180ad779bd89bc134776b0d5d1
MD5 SHA1 SHA512

Bddelkses/Mordvaabnets.jpg

SHA256 d8a3d0702348e691f6356ab23ad9dfce7b52e0a7eb75e2218d2440a9efdb600b
MD5 a5acf99197fbe1e11561839db4bbd0a6
SHA1 e61d440b225547f0ee5f722097bd9441b3a1c6c9
SHA512 ec0d0e8a35f5573aa2e4f5a241ff326f06592c0b876a84ed2aeefdcc8798ffe86ce3aedc1d948d9cc8d6f307f973c20a19b533088d8c4f125c6374dae1b2fb82
SSDEEP 96:RhOE+C0vaZ3RcYhXZ4Hn7RhYYEswDZLh8K7:LO7EFVZK7RfEseh9
MD5 SHA1 SHA512 SSDEEP

Bddelkses/Preadmonition20.ove

SHA256 c638fce2b6a7f1cc785089f7bceeb0ecbe3aac672994fed54be2eeabe14c91b1
MD5 1fe0670d7da023e20d5ade9285d56c12
SHA1 b7dd4195470223b68942c1b2da94823c6db8bf67
SHA512 9c6cc71df9435f039c2cba8be749b2366b3cce95bfe3d5a3bd11e13adfee92a0da79e10af147959a4d72413f35454246d172f4d6d2fe74b232f7d7f009898c60
SSDEEP 3072:CD35q70qe4QVPlj0y1OAvGfBwl31QKCkoWjbNtg9W+23bGCY+8fozvq630OGFo0j:HAwwbZBp8
MD5 SHA1 SHA512 SSDEEP

Bddelkses/Tonation.jpg

SHA256 97a96784faa7d0c13326b8fc3fe600fc9cd2b7f20383b7019f3fe5892d6bf707
MD5 d67bca7a20d8e99630887f04b2cf82f1
SHA1 b83d56e948fc697398fa88de635b8bf6683ef170
SHA512 e060eb45c0c9cebf5a9f5a9bdd3ada767e1fb15b24d6b7ddd4b34f40bed429dd04a4b6f0e75df1b300851c17079f93f8d2bfa23bd1d8c00080f0a25bfdaef75c
SSDEEP 384:Xvs9Mnh+JtrISqaH9FDkfcu+q6eo4zAoApd2GWpBED5DnfDWKh4cJwhSAEW2n:XkynIkSqanAfcu+q1/Apd2lp+DpBJwhw
MD5 SHA1 SHA512 SSDEEP

Bddelkses/Vuggevisens.tid

SHA256 d33b80a108091d8bc7042d55ab4a9927432ca6f265ffbf29008bb3170093105a
MD5 493aa3704b5232691c85908af19f84e0
SHA1 99f474e6bd3c60dac4909cc481371c1f497c6820
SHA512 0d095dbcc03c8f6a35e3363287e9eee031666c78169e8148c73288a3e1de8dd9125970ff9435c454aa455444c4143a8dea4c4ff8f4a32f8ee26704ed32fa91c3
SSDEEP 768:ot9YUxkaybcwogonFGRoonf+GFky65/30AswsQb7g:otKUiQXg
MD5 SHA1 SHA512 SSDEEP

Bddelkses/alderney.jpg

SHA256 8b49181f164c4c0dc270cfb063507a03e6f73adeb3242ec152291341a671eaac
MD5 94c27da69d8cf7bafed019a3ff0f5fdf
SHA1 60eb84014299e3999b9cffe52521ab994da52925
SHA512 c77e4c9995f959b7d125aa5d828ffbabc9a5485dc28ca1dc9d10a39c3d89a62370a1fdc1888e68f2fbd5f0e275127ca23adf7ab7094a57eff56eb3a9375dc736
SSDEEP 192:LwvFQCBGfqbL48QwHPSBnb/1nMhMBbu4SXHCjRnIfvKf1upR26SN/YQuQeKhSH:0NBZR/vEb/Z6MI44Hu2vKfcq6SP1tO
MD5 SHA1 SHA512 SSDEEP

Bddelkses/assuranceselskabets.jpg

SHA256 9e091fef3fa9c99bb32c868cae266cdf79a37dc9c0fa1b83a33e59fb45abc71d
MD5 4c1d54c8a4903b6f12df1a3c60d7385a
SHA1 3b56bf989c80882528401dedf9ff2bc7743ebc9b
SHA512 34ba1af75c53efa42fcfd4c448d09815fa2f42228dbeaae24dbddc8c8492e89202c00cc9c018ac3978b8756a48a5d3749eec9a8051e187e217dba965b2db2aaa
SSDEEP 1536:7HhutAeLui+X0e2gChrxevJbvj/1BAzTIR439wd:tuyKkJCrevJX/1sMa9wd
MD5 SHA1 SHA512 SSDEEP

Bddelkses/coater.jpg

SHA256 a41edf17ced3023edc8ed596b3525621f626f94c4d4586047c68d4e82e35b308
MD5 a1c97c1dcc9a752fd66521b1e6e210ac
SHA1 5e605c48aaf516ef5b952f5960005d83a3b78579
SHA512 0666f8262b704e533dd3a116e670b92780a7108beda97d967b36d008c15d60dbcea812f34c84ce001829c79a74e0302d3402c11b6eabdb08ce421594b5f5b6d2
SSDEEP 96:RhoEpmbOFMt2NhCe+dmttdphAOr4uJiGR4pk9UQ+ZCq8+3Q7r8ymwalE24uqF65k:LoWBFzDgd0VTbJWk9UrZuRPx9u3zHoB
MD5 SHA1 SHA512 SSDEEP

Bddelkses/consolute.ini

SHA256 9f45c639d0bcfaab3044c4e03bff984b5a46dc11835d1a85677ea774eb545012
MD5 58783a1cc968dd4d81913845dad80ad0
SHA1 b2070585c3aa6125f4ec285ee6a6c32ba28bd278
SHA512 a10a0263b1380ee95a03365fc3cb863f123d9a575d89dcdec147ba8d5a96e85bd48d1a5984fa0f152cbd7a45ea00a2961fd0d6ff4cfa170d6b6c206dfaa5cb5a
MD5 SHA1 SHA512

Bddelkses/doughfaceism.jpg

SHA256 565f372185fcb22aabe2fe5d65fda0e6d2b241296924a3a911b251510c38e206
MD5 9bb75ccc92ea84fe84a6bef65b0ebe1d
SHA1 f182d90a8a69abd17f87f1bfe894981a40578c41
SHA512 b6d05b97dc9df1b4603d5415a68bdfe18d22dc76f9d28683227bdd330fb54e6a70e5e30ae5a31f885346ce3bd1f7773b413b29031bcc371531932c6d7e0c96e0
SSDEEP 384:6ynMlZSJIZiYUNbLtYeOmqt/h17dcrRXtvskGe8Vu0NXu:6ynr2rGHCrm8Z1CNskcRXu
MD5 SHA1 SHA512 SSDEEP

Bddelkses/externomedian.jpg

SHA256 d69d9fce974e7c61d7e2c863781f7166f852e87d8c1d518492ed92292c38212d
MD5 d4d9c90b4f5144d306b262b4ee3996e7
SHA1 82e2a0031a3ea7c52c3fcfea73c08c927c878ecd
SHA512 7a8c2be9ad3c57449d2d0fc7d212e7b8dc926169802b59bc630fb3a1459546473166474c1214cfbc652017c187226651c491fb8a73ed80c8e00bdc9a7893fb5d
SSDEEP 384:qMVi5Kz9S8zEGkVXtkMIZdeUzH/rdGLkCx7S/aTVq9cB:qMVioz9IGkVKXeUzjdGcCx
MD5 SHA1 SHA512 SSDEEP

Bddelkses/flannels.ini

SHA256 3a2245179f82577b505f0bae71742b3509600e37dab5337fc2c20179917a3ec8
MD5 e7851126ae404a3de61b290fea3eb31f
SHA1 b6b4a9c983d728b8c81ab605a536e76ef305cc65
SHA512 508c2190b84fde7447ecd7b60fb91289c4a781c00d7d9992957daddc27544698fb36b3eadb4d6b8c7b34963843527cf2b6e22a9cc20f4f33315d5e24db3582eb
MD5 SHA1 SHA512

Bddelkses/fremskaff.ini

SHA256 0c85a2cf95fd3ba21e34b761863a4fb507e3cc2fceac67295513907bf25c9022
MD5 4c6bbb918d7f854abdb7c44590d39bd1
SHA1 f035153459e8433bbd7fc8ca8b68869f4f09c950
SHA512 5f66bbd21e1a80e38430e7ac6d7ccf5b4a18db8ea4211f55acc988c32ba27a7e4ed6fb644b8f47f5d86b83e6118df28a5669148846a903fd80e8992e5ca51d00
MD5 SHA1 SHA512

Besvrliggjort.Van133

SHA256 f32f4655ae63807af3841e5b4f806b4cac43cc993417fc74ff0403e8037efa39
MD5 b309e0c56e116ca4bb506532d3301d26
SHA1 dd262120aff0dcc56ca5c142dfe9a2e0c5a754a6
SHA512 0976fa442e5ba759922f738cc0aad568573b88d941a6b1d5cf9b09643566b59736c69d75ad20f7b73c35bcc0f602e498c4498c32a7c3273a7e4729701ff2a1cb
SSDEEP 6144:hTTWvzFKvVMVn9jiqpJ9t5dFgf1BXzED2Bk2q2cOl:5a7FK6//h54f1NzE6B6e
MD5 SHA1 SHA512 SSDEEP

Glossologies/swellfishes.ini

SHA256 8b685b514f1ffaa676ebc57f4d2403c097feff95091dc5657dad9398aefdba77
MD5 9ea503498ef15ff64a7c82ca5f52d574
SHA1 f0c5f5a8e712b93d7c9264d6a8d6decdadf4a270
SHA512 84cea81ca38bf2b78651db867a2b97f77b018454547571e875f186dc9363a66218e6f7663511d52bce7f19fe3fe69870cbb73d7882df6a469602d1841ab75d01
MD5 SHA1 SHA512

Glossologies/trebucket.ini

SHA256 acb016deeead1ed1c9d6be0406f573d81da854bd570d7ca409594d06a5ac953d
MD5 c864f4294bc5b56b60ad69bcf408841e
SHA1 2e4ce7fe1300e5590a29c452dfbd1bd51cc7d444
SHA512 1482f9a7e970dc53b887c3679c525eb26bf0183d20b46189f6174bbcc1c6183fe567411df7863184e0c2d08c8f74a1df5ef404f98b48d8fa29a39795be1ad614
MD5 SHA1 SHA512

Glossologies/underetagen.tas

SHA256 2138bd467a686f63cbfbdaa992b62a1b60af22192285765baa5582b7572a9dcc
MD5 ec566901ff4b6397b964a9cfd19413f1
SHA1 8ddbe78e52f2cc5123dd0b559b06fab3dd526e1c
SHA512 cf7f2fc3c4d72c9ca5f4f63a6de24fdf136fc568cd110184d92a8e89e15daa10a3f1759ddff90b1ec7752da90847e0bc3fd3015511c4f19e84a055762ccb69aa
SSDEEP 1536:BQbZ6McGlBAhCrD1ORROW2eOruB7QkzW3XoT3mrMK0Q9gPRKJbkLDf3hogZwiZYA:s06ozb20/Xy2iBQ6B3a
MD5 SHA1 SHA512 SSDEEP

Skyldsflelsers.Pos

SHA256 f4c99919eaf75b521f3e08ec3e4378cc546a07de51735e48d7cf9110a4afec3c
MD5 550953a2f63ed2b48ebf6f76343105dc
SHA1 f9425cafc739b32c655b05afdf9a5930337f2a54
SHA512 956bb1f66503873a3b721875123c485ca47e7f9f9ce14ce451a2a4b0f1c705b40774ac1569bdb41e83758e880586e1f7740598b3112744e0b68720ae4e0deab3
SSDEEP 768:iPi38zuk1tqO6kIRVOfsWD1psa71w+Mig6SR2hCWmm4oOr7G0ugpS12n:MAOlrJAOUCfj1w/ig6SR2uqOrbb
MD5 SHA1 SHA512 SSDEEP

regenereringens.jpg

SHA256 ebeeb3c90990def0715c7ad916086760b7a48a3c68d927b72a6706bfc848d4dd
MD5 8145d5aff0b7e710f7722bfbc4d642c3
SHA1 ab79d97123a77b690671bdc5e177f6c34eb0686e
SHA512 39153a6b32e0b89eda8a4eac26058afba0dc94306dcaf94bd9d1d95bbac12200f08caa493b8394a0f0fd8cdf96f2812657db65eae814b3593b9f5aec81b10d42
SSDEEP 192:LGpB8H5FjyifoM3ips5StnIq5fssf6MNZwNCa0x0mGKZXdS1+mRV4SFMlfGC:yp6H59yifX3LgqAlLNZwNe0mdc1+mkDn
MD5 SHA1 SHA512 SSDEEP

snild.txt

SHA256 67553983e0385e5f132b85da91c15f164a275409fbae5af892b673ce9cbe350e
MD5 cb0c5eaa7082e8658634531a5eef4f58
SHA1 6c1d5fa90ef28530e4bcff744f3e27d035ad3194
SHA512 ce507f3953b0c20c520949ac3c2d68a7fa19540c1e1739be0b03b395790093e1e80ff0da03c43098dcf11763ae16ddfb43b4972354e40ccac7ee9e7e826d42b1
MD5 SHA1 SHA512

stdigeres.jpg

SHA256 73b6e7e2168c91f3c91cb3fcc2b1c877404b6bc37f9c78dbcb91182ba6c51776
MD5 afe667f9d1b6ca9e79e0f69c40eecca9
SHA1 6ccea85c9a24086a0e44a3b2d18cdd55ac523dfd
SHA512 8e7351d9dd61999fd333a5e859d27d3d5cc37800e5bbc2cae300470e5ba6e06512ea012d26147a66082aa9cf8803e759277900e03ab3ffbdca13cdeeb8bcc815
SSDEEP 768:nmALp0uizgmT9hS9AsMXOpkOiaeOGaw7llfIzB9uFIF5yquPzSl1mD8Q8aq3dokh:nmICuiMG9hSKsGOJxlw7TQzB9uOF5JtN
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer